Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-45hc-hgxj-7279

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

EPSS

Процентиль: 45%
0.00227
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
nvd
около 10 лет назад

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

EPSS

Процентиль: 45%
0.00227
Низкий

7.4 High

CVSS3