CVE-2015-1993

Опубликовано: 08 нояб. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

Комментарий

CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21968270
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21968270
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-p6x3-7388-g9pr

github

больше 3 лет назад