Skip to content
Sign in
3.7 Low

CVE-2022-22330 IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the…

Description

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.

Affected products and versions

Product Affected versions Fixed in
Control Desk 7.6.1 No fix stated

Other CVEs of Control Desk

The 3 CVEs of Control Desk →
CVE-2022-22329 IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies 4.3 Medium CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting 5.4 Medium
Track this CVE