1. Home
  2. CVE Database
  3. CVE-2024-24768
MEDIUM · 6.5

CVE-2024-24768

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in ...

Vulnerability Description

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Fit2Cloud1Panel1.9.5

Related Weaknesses (CWE)

CWE-315CWE-311

References

FAQ

What is CVE-2024-24768?

CVE-2024-24768 is a vulnerability with a CVSS score of 6.5 (MEDIUM). 1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in ...

How severe is CVE-2024-24768?

CVE-2024-24768 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-24768?

Check the references section above for vendor advisories and patch information. Affected products include: Fit2Cloud 1Panel.