Microsoft XML Core Services XMLHttpRequest 'SetCookie2' Header Information Disclosure Vulnerability
Publish date: 29 de septiembre de 2016
Gravedad: Medio
Descripci¨®n
Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls.
Revelaci¨®n de la informaci¨®n
Apply associated live casino online DPI Rules.
Soluciones
live casino online Deep Security DPI Rule Number: 1007951