CVE-2008-6298: Rocketeer.dip Sisapilocation

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."

Affected products

• Rocketeer.dip Sisapilocation: up to and including 1.0.2.0; version 1.0.1.3 only; version 1.0.1.4 only

Published 2009-02-26. Last modified 2026-06-16.