CVE-2023-5035

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-614CWE-319

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-503507.5HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to dCVE-2023-503519.1HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiaCVE-2023-503555.3HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, moCVE-2023-503566.5SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi ViCVE-2023-503575.4A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privilegCVE-2023-503585.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2023-503596.7An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability CVE-2023-50368.8Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.CVE-2023-503608.8A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to CVE-2023-503618.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-503628.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-503638.1An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability
CVE-2023-5035: Medium severity, CVSS 5.3 | Vulnix