CVE-2019-4638
3.7LOWIBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techn
Опубликовано: 1/28/2020Обновлено: 11/21/2024
Описание
IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.
ИИ-АнализНа базе ИИ
Затронутые продукты
ibmsecurity_secret_server
Ссылки
- https://exchange.xforce.ibmcloud.com/vulnerabilities/170044VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/1283236PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/170044VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/1283236PatchVendor Advisory