{"data":{"id":"CVE-2008-4122","cve_id":"CVE-2008-4122","title":"Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by int…","summary":"Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by int…","severity":"HIGH","cvss":{"score":7.5,"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"nvd"},"published_at":"2008-12-19T17:30:02.907000Z","modified_at":"2026-06-16T22:57:13.380000Z","withdrawn_at":null,"is_joomla":true,"is_joomla_core":true,"relevance":"certain","product":"Joomla CMS","extension":{"type":null,"name":null},"sources":["nvd"],"source_count":1,"url":"https://cve.oyer.fr/cve/CVE-2008-4122","description":"Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.","cwe":["CWE-319"],"affected":[{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*","version_start":"1.5.8","version_end":"1.5.8","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"}],"references":[{"url":"http://int21.de/cve/CVE-2008-4122-joomla.html","title":"Third Party Advisory","source":"nvd"},{"url":"http://securityreason.com/securityalert/4794","title":"Third Party Advisory","source":"nvd"},{"url":"http://www.securityfocus.com/archive/1/499295/100/0/threaded","title":"Broken Link, Third Party Advisory, VDB Entry","source":"nvd"},{"url":"http://www.securityfocus.com/archive/1/499354/100/0/threaded","title":"Broken Link, Third Party Advisory, VDB Entry","source":"nvd"}],"source_records":[{"source":"nvd","external_id":"CVE-2008-4122","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4122","severity":"HIGH","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_version":"3.1","first_seen_at":"2026-09-26T09:27:07.339379Z","last_seen_at":"2026-09-26T09:34:00.988097Z"}],"history":[{"at":"2026-09-26T09:27:07.339379Z","event":"created","source":"nvd","detail":"Détectée via nvd"}]}}