4.3

CVE-2014-6153

EPSS 0.61%
Published 24.12.2014 11:59:02
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Websphere Service Registry And Repository Version6.3.0

Ibm ≫ Websphere Service Registry And Repository Version6.3.0.1

Ibm ≫ Websphere Service Registry And Repository Version6.3.0.2

Ibm ≫ Websphere Service Registry And Repository Version6.3.0.3

Ibm ≫ Websphere Service Registry And Repository Version6.3.0.4

Ibm ≫ Websphere Service Registry And Repository Version6.3.0.5

Ibm ≫ Websphere Service Registry And Repository Version7.0.0

Ibm ≫ Websphere Service Registry And Repository Version7.0.0.1

Ibm ≫ Websphere Service Registry And Repository Version7.0.0.2

Ibm ≫ Websphere Service Registry And Repository Version7.0.0.3

Ibm ≫ Websphere Service Registry And Repository Version7.0.0.4

Ibm ≫ Websphere Service Registry And Repository Version7.0.0.5

Ibm ≫ Websphere Service Registry And Repository Version7.5.0.0

Ibm ≫ Websphere Service Registry And Repository Version7.5.0.1

Ibm ≫ Websphere Service Registry And Repository Version7.5.0.2

Ibm ≫ Websphere Service Registry And Repository Version7.5.0.3

Ibm ≫ Websphere Service Registry And Repository Version7.5.0.4

Ibm ≫ Websphere Service Registry And Repository Version8.0

Ibm ≫ Websphere Service Registry And Repository Version8.0.0.1

Ibm ≫ Websphere Service Registry And Repository Version8.0.0.2

Ibm ≫ Websphere Service Registry And Repository Version8.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.61%	0.674

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://www.ibm.com/support/docview.wss?uid=swg21693379

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21693381

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21693384

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21693387

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21693389

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV64010

https://exchange.xforce.ibmcloud.com/vulnerabilities/97622

https://nvd.nist.gov/vuln/detail/CVE-2014-6153

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-6153

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-6153

EUVD