Authorization

2018-12-1316:29:00

PRIOn knowledge base

www.prio-n.com

3.5 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703.

CPENameOperatorVersion
security_access_managerge9.0.1.0
security_access_managerle9.0.5.0

CPE	Name	Operator	Version
	security_access_manager	ge	9.0.1.0
	security_access_manager	le	9.0.5.0

References

www.ibm.com/support/docview.wss?uid=ibm10787785

exchange.xforce.ibmcloud.com/vulnerabilities/149703