Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xv9w-4fw4-w5r9

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

EPSS

Процентиль: 48%
0.00254
Низкий

Связанные уязвимости

nvd
больше 11 лет назад

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

EPSS

Процентиль: 48%
0.00254
Низкий