Lucene search
IbmCVE-2014-0909HistorySep 10, 2014 - 10:55 a.m.
CVE-2014-0909
2014-09-1010:55:07
CWE-200
ibm
web.nvd.nist.gov
21
ibm
rlks
cve-2014-0909
session cookie
vulnerability
security
remote attackers
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
70.2%
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected configurations
Node
ibmrational_license_key_serverMatch8.1.4
ORibmrational_license_key_serverMatch8.1.4.2
ORibmrational_license_key_serverMatch8.1.4.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | rational_license_key_server | 8.1.4 | cpe:2.3:a:ibm:rational_license_key_server:8.1.4:*:*:*:*:*:*:* |
| ibm | rational_license_key_server | 8.1.4.2 | cpe:2.3:a:ibm:rational_license_key_server:8.1.4.2:*:*:*:*:*:*:* |
| ibm | rational_license_key_server | 8.1.4.3 | cpe:2.3:a:ibm:rational_license_key_server:8.1.4.3:*:*:*:*:*:*:* |
Related
prion
prion
Session fixation
2014-09-10 10:55:00
cvelist
cvelist
CVE-2014-0909
2014-09-10 10:00:00
nvd
nvd
CVE-2014-0909
2014-09-10 10:55:07
ibm
ibm
nessus
nessus
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
70.2%
Related for CVE-2014-0909