CVE-2022-3251: Ikus-Soft Minarca

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

Affected products

• Ikus-Soft Minarca: before 4.2.2 (fixed in 4.2.2)

Published 2022-09-21. Last modified 2026-06-17.