CVE-2008-7295

CVE-2008-7295 describes a vulnerability in Microsoft Internet Explorer where it fails to properly restrict modifications to cookies established in HTTPS sessions. This allows man-in-the-middle attackers to overwrite or delete arbitrary cookies using a Set-Cookie header in an HTTP response, a "cookie forcing" issue related to the absence of HSTS includeSubDomains. The vulnerability has a CVSS score of 5.8, indicating a medium severity with network access and medium attack complexity, potentially leading to partial integrity and availability impacts. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.