View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2013-7436 severity moderate: SUSE including 1 source package names (novnc-0.4-0.13.1), 1 product×package rows across 1 product lines (SUSE OpenStack Cloud 5): Fixed 1.
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.