Aller au contenu
Se connecter
4.3 Moyenne

CVE-2022-22329 IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies

Description

IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 219124.

Produits et versions touchés

Produit Versions touchées Corrigé en
Control Desk 7.6.1 Pas de correctif indiqué

Autres CVE de Control Desk

Les 3 CVE de Control Desk →
CVE-2022-22330 IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the… 3.7 Faible CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting 5.4 Moyenne
Suivre cette CVE