3.7
Faible
CVE-2018-1804 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure…
Description
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Access Manager Appliance 9.0 | 9.0.1.0 → 9.0.5.0 | Pas de correctif indiqué |
Autres CVE de Security Access Manager Appliance
Les 16 CVE de Security Access Manager Appliance →
CVE-2020-4395
IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an…
6.3
Moyenne
CVE-2019-4725
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting
6.1
Moyenne
CVE-2020-4461
IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing…
6.5
Moyenne
CVE-2019-4707
IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when…
7.1
Élevée