CVE-2018-1340

CVE-2018-1340 describes a vulnerability in Apache Guacamole versions prior to 1.0.0 where the session token cookie lacked the "secure" flag. This oversight could enable an attacker performing network eavesdropping to intercept a user's session token if unencrypted HTTP requests were made to the same domain. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a high potential for confidentiality impact without requiring user interaction or complex attack conditions. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.