PT-2018-4619
CVE-2016-0351
·
تاريخ النشر
2018-02-21
·
تاريخ التحديث
2018-03-13
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Identity Manager Virtual Appliance versions 7.0.x before 7.0.1.3-ISS-SIM-IF0001
Description
The issue makes it easier for remote attackers to capture session cookies by intercepting their transmission within an HTTP session, as the secure flag for the session cookie in an HTTPS session is not set.
Recommendations
For IBM Security Identity Manager Virtual Appliance versions 7.0.x before 7.0.1.3-ISS-SIM-IF0001, update to version 7.0.1.3-ISS-SIM-IF0001 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTPS sessions to minimize the risk of cookie interception.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾