UpHeron
All vulnerabilities

Servers and applications

CVE-2022-32778

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the…

Severity
High 7.5
Published
22 Aug 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
AVideoServers and applications · cpe:a:wwbn:avideo
  • Version 11.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-32778
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-32778