CVE-2024-6741

Summary

CVE-2024-6741 is a vulnerability affecting Openfind's Mail2000 software. The issue permits the HttpOnly flag, designed to secure cookies from being accessed through client-side scripts, to be bypassed. attackers can exploit this vulnerability without authentication, making it possible for them to obtain session cookies protected by the HttpOnly flag using crafted JavaScript code. This poses a significant risk for data theft and unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.