Vulnerabilities (CVE)

Filtered by CWE-784
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3083 1 Landisgyr 2 E850, E850 Firmware 2023-11-07 N/A 5.4 MEDIUM
All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.
CVE-2023-3050 1 Tmtmakine 2 Lockcell, Lockcell Firmware 2023-06-22 N/A 9.8 CRITICAL
Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15.
CVE-2020-8184 3 Canonical, Debian, Rack Project 3 Ubuntu Linux, Debian Linux, Rack 2023-02-16 5.0 MEDIUM 7.5 HIGH
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.