CVE-2008-0128
The MITRE CVE dictionary describes this issue as:
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
Find out more about CVE-2008-0128 from the MITRE CVE dictionary dictionary and NIST NVD.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Satellite 5.1 (RHEL v.4 AS) | RHSA-2008:0630 | 2008-08-13 |
| Red Hat Satellite 5.0 (RHEL v.4 AS) | RHSA-2008:0261 | 2008-05-20 |
| Red Hat Certificate System 7.3 for 4AS | RHSA-2010:0602 | 2010-08-04 |
| Red Hat Satellite v 4.2 (RHEL v.4 AS) | RHSA-2008:0524 | 2008-06-30 |
| Red Hat Satellite v 4.2 (RHEL v.3 AS) | RHSA-2008:0524 | 2008-06-30 |
CVE description copyright © 2017, The MITRE Corporation