PT-2020-18242
CVE-2020-4780
·
تاريخ النشر
2020-10-12
·
تاريخ التحديث
2020-10-26
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Curam Social Program Management versions 7.0.9 through 7.0.10
Description
The issue is related to the OOTB build scripts not setting the secure attribute on session cookies. This may allow unauthorized parties to observe cookies.
Recommendations
For versions 7.0.9 through 7.0.10, ensure the secure attribute is set on session cookies to prevent unauthorized observation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾