Skip to content
Sign in
5.9 Medium

CVE-2022-38386 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through…

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.

Affected products and versions

Product Affected versions Fixed in
Cloud Pak for Security 1.10 1.10.0.0 → 1.10.11.0 No fix stated
QRadar Suite for Software 1.10 1.10.12.0 → 1.10.19.0 No fix stated
cloud_pak_for_security 1.10 1.10.0.0 → 1.10.11.0 No fix stated
qradar_suite 1.10 1.10.12.0 → 1.10.19.0 No fix stated

Other CVEs of Cloud Pak for Security

The 55 CVEs of Cloud Pak for Security →
CVE-2025-25020 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 6.5 Medium CVE-2025-1334 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows… 4.0 Medium CVE-2025-25021 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 7.2 High CVE-2025-25022 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 9.6 Critical
Track this CVE