PT-2019-16969
CVE-2019-4214
·
تاريخ النشر
2019-11-22
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM SmartCloud Analytics versions 1.3.1 through 1.3.5
Description
The issue allows an attacker to obtain sensitive information using man-in-the-middle techniques because it does not set the secure attribute on authorization tokens or session cookies.
Recommendations
For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, consider updating the software to a version that sets the secure attribute on authorization tokens or session cookies to prevent sensitive information from being obtained by an attacker.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾