PT-2013-1849
CVE-2012-5936
·
تاريخ النشر
2013-07-03
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote attackers to capture session cookies by intercepting their transmission within an http session, as the secure flag is not set for the session cookie in an https session.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, ensure that the secure flag is set for the session cookie in https sessions.
For IBM Sterling File Gateway versions 2.1 through 2.2, ensure that the secure flag is set for the session cookie in https sessions.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾