{"action":"Upgrade org.apache.tomcat:tomcat to 6.0.35 or later.","affected":[{"fixed":"6.0.35","introduced":"6.0.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2010-4312"],"ecosystem":"Maven","epss":0.02136,"exploited":false,"fixed_versions":["6.0.35"],"ghsa_id":"GHSA-pvjh-7h8q-q56r","id":"tcs_01M5N98302X0WHGWTDE2R43F6G","modified_at":"2024-02-08T00:11:46.740632Z","published_at":"2022-05-14T02:42:23Z","references":["https://osv.dev/vulnerability/GHSA-pvjh-7h8q-q56r","https://nvd.nist.gov/vuln/detail/CVE-2010-4312","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608286","https://github.com/apache/tomcat","https://launchpad.net/bugs/cve/CVE-2010-4312","https://security-tracker.debian.org/tracker/CVE-2010-4312","https://ubuntu.com/security/CVE-2010-4312"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-pvjh-7h8q-q56r","url":"https://osv.dev/vulnerability/GHSA-pvjh-7h8q-q56r"}],"summary":"Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header"}