CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2024-10718

In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0.

Score
7.5 high
Published
2025-03-20
Links
NVD · cve.org

Matched ports (1)

PortPackageVersionStatusMaintainer
net-mgmt/phpipamphpipam1.6.0unaddressedjake@xz.cx

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>phpipam</name>
	<range><lt>1.7.0</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive
	cookies in HTTPS sessions is not set. This could cause the user agent
	to send those cookies in plaintext over an HTTP session, potentially
	exposing sensitive information. The issue is fixed in version 1.7.0.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2024-10718</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2024-10718</url>
    </references>
    <dates>
      <discovery>2025-03-20</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>