CVE-2024-44575

—

CVSS 3.1

3.7 low

EPSS

<1%p17

Published

Sep 11, 2024 (Sep 11, 2024)

Modified

Jul 5, 2026

Description

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.

Vendors: relyum
Products: rely-pcie firmware
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.