CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.0. It may be remotely exploitable.
CVE
CVE-2014-0634
Severity
MEDIUM
CVSS
6
EPSS
0.96%
Original NVD Description
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.