The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.
Weakness
The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mailaudit | Openfind | * | 6.1.7.040 (excluding) |
| Mailgates | Openfind | * | 6.1.7.040 (excluding) |
Potential Mitigations
References
- https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
- https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
- https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html
- https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
- https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
- https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html