[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f54hVtXyU3ECW5FPgjsiL1j0Sh0PWzKM4vBONKNWvx10":3,"g5a-risk:CVE-2021-35236":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":67,"weaknesses":68,"weaknessesCount":67,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":119,"notableEvents":120},"CVE-2021-35236","What is CVE-2021-35236?","The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel such as HTTPS. This will help protect the cookie from being passed over unencrypted requests. If the application can be accessed over both HTTP, there is a potential for the cookie can be sent in clear text.","The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to only send the cooki...","2021-10-27T01:15:07.53","2022-10-27T16:58:56.587",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":38,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":28},"psirt@solarwinds.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":34,"PrivilegesRequired":23,"UserInteraction":35,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N","HIGH","REQUIRED",3.1,1.6,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":25,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.00519,[47,47,47,47,47,47,47],"Medium",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"solarwinds","kiwi_syslog_server","*","cpe:2.3:a:solarwinds:kiwi_syslog_server:*:*:*:*:*:*:*:*",1,[58,64],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fdocumentation.solarwinds.com\u002Fen\u002Fsuccess_center\u002Fkss\u002Fcontent\u002Frelease_notes\u002Fkss_9-8_release_notes.htm","Solarwinds",[62,63],"Release Notes","Vendor Advisory",{"url":65,"source":60,"tags":66},"https:\u002F\u002Fwww.solarwinds.com\u002Ftrust-center\u002Fsecurity-advisories\u002Fcve-2021-35236",[63],2,[69,77],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",{"id":78,"name":79,"description":80,"extendedDescription":81,"status":74,"abstraction":82,"structure":76},"CWE-614","Sensitive Cookie in HTTPS Session Without 'Secure' Attribute","The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.","","Variant",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2021-35236? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-35236, a medium severity cyber security vulnerability from 2021. The Secure flag is not set in the SSL Cookie of Kiwi Sysl...","CVE-2021-35236, CVE-2021-35236 vulnerability, CVE-2021-35236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, solarwinds security, kiwi_syslog_server vulnerability","\u002Fwhat-is\u002Fcve-2021-35236",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-35236","Cybersecurity","CVE-2021-35236, CVE-2021-35236 vulnerability, CVE-2021-35236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":26,"Negate":26,"Nodes":112},[113],{"Operator":114,"Negate":26,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":118},"26A25843-D11B-44FB-8CD7-7FBC99D586E2","9.7.2",[],[],{"lastModified":11,"cacheTime":122,"version":41},1793387646059,{"score":124,"band":125,"action":126,"scoredAt":127},22,"Low","Monitor","2026-10-30T06:52:49.473255+00:00"]