Описание
IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ibm:security_verify_information_queue:10.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00298
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-565
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.
EPSS
Процентиль: 53%
0.00298
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-565