CVE-2016-7090

https://notcve.org/view.php?id=CVE-2016-7090

29 Sep 2016 — The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. El servidor web integrado en los módulos de Siemens SCALANCE M-800 y S615 con firmware en versión anterior a 4.02 no establece el indicador de seguridad para la cookie de la sesión en una sesión https, lo que facilita a a... • http://www.securityfocus.com/bid/93115 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •