CVE-2024-6739: Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-07-15 · updated 2026-06-17
Weakness: CWE-1004

Description

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

Affected products

Openfind MailAudit: before 6.1.7.040 — fixed in 6.1.7.040
Openfind MailGates: before 6.1.7.040 — fixed in 6.1.7.040

How to fix

Upgrade to a fixed version: Openfind MailAudit 6.1.7.040; Openfind MailGates 6.1.7.040. Check the vendor advisory for mitigations.

References

https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html
https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html

Get alerted when CVE-2024-6739 or the next vulnerability affects your stack