3.7
Low
CVE-2026-9825 IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over…
Description
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CyberFraud 1.0 | 1.0.0 → 1.0.2 | No fix stated |