AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-14248

MEDIUM · CVSS 5.3 EPSS 0.66%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-14248
Severity
MEDIUM
CVSS
5.3
EPSS
0.66%

Original NVD Description

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

Related CVEs

Other vulnerabilities affecting the same vendor(s)