Description
The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to false can lead to a higher possibility of Cross-Side-Scripting attacks which target the stored cookies.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG SICK Media Server
Default version status: unaffected
0 to < 1.5affected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json ↗