Описание
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00227
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-17
Связанные уязвимости
CVSS3: 7.4
github
больше 3 лет назад
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
EPSS
Процентиль: 45%
0.00227
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-17