CVE-2020-4146

Name of the Vulnerable Software and Affected Versions: IBM Security SiteProtector System version 3.1.1

Description: The issue is caused by a missing 'HttpOnly' flag, allowing a remote attacker to obtain sensitive information. A remote attacker could exploit this to obtain sensitive information.

Recommendations: For IBM Security SiteProtector System version 3.1.1, consider setting the 'HttpOnly' flag to prevent sensitive information from being accessed by a remote attacker. As a temporary workaround, restrict access to sensitive data until a patch is available.