Security Advisory
CVE-2014-8775
5
Vulnerability Description
MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published Date
December 3, 2014
Official Source
NIST NVD Advisory