Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2p6v-c8r2-4f2q

Опубликовано: 14 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.

EPSS

Процентиль: 34%
0.00134
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
nvd
больше 3 лет назад

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.

EPSS

Процентиль: 34%
0.00134
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200