CVE ID:	CVE-2015-1848
Description:	The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.
Test IDs:	1.3.6.1.4.1.25623.1.0.882178   1.3.6.1.4.1.25623.1.0.882185
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1848 74623 http://www.securityfocus.com/bid/74623 FEDORA-2015-8761 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159374.html FEDORA-2015-8765 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159412.html FEDORA-2015-8788 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159401.html RHSA-2015:0980 http://rhn.redhat.com/errata/RHSA-2015-0980.html RHSA-2015:0990 http://rhn.redhat.com/errata/RHSA-2015-0990.html https://bugzilla.redhat.com/attachment.cgi?id=1009855 https://bugzilla.redhat.com/attachment.cgi?id=1009855