Описание
HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hcltech:intelliops_event_management:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00016
Низкий
2.2 Low
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 2.2
github
7 месяцев назад
HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks.
EPSS
Процентиль: 3%
0.00016
Низкий
2.2 Low
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-319