Apache httpOnly Cookie DisclosureType: Cookie Disclosure — Norman Hippert — Company: sudos.ec — (wildcat at the-wildcat dot de) Reported: 15.01.2012 Published: 31.01.2012 Updated: 31.01.2012 Affected versions: 2.2.0 - 2.2.21 Risk: moderately critical (xss needed) Solution: ErrorDocument 400 "Your Error Page Content" or Upgrade to Apache 2.2.22 or newer. CVE-ID: CVE-2012-0053 Description during my pentests I've noticed that you ca
