CVE-2008-2558

MEDIUM · CVSS 5 EPSS 1.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-06-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-2558

Severity

MEDIUM

CVSS

EPSS

1.06%

Original Filing — NVD Description

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.