Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fw3p-p4px-mp7p

Опубликовано: 25 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 194891.

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 194891.

EPSS

Процентиль: 41%
0.00192
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 5.3
nvd
больше 3 лет назад

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 194891.

EPSS

Процентиль: 41%
0.00192
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668