CVE-2019-4638

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.
References
Configurations

Configuration 1

cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*

Information

Published : 2020-01-28 07:15

Updated : 2020-01-30 01:35


NVD link : CVE-2019-4638

Mitre link : CVE-2019-4638

Products Affected
No products.
CWE
CWE-565

Reliance on Cookies without Validation and Integrity Checking