Ibm ≫ Business Automation Content Analyzer On Cloud

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

4.3

CVE-2020-4315

EPSS 0.04%
Published 21.09.2020 15:15:12
Last modified 21.11.2024 05:32:34

IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site ...