Aller au contenu
Se connecter
3.7 Faible

CVE-2022-22330 IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the…

Description

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.

Produits et versions touchés

Produit Versions touchées Corrigé en
Control Desk 7.6.1 Pas de correctif indiqué

Autres CVE de Control Desk

Les 3 CVE de Control Desk →
CVE-2022-22329 IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies 4.3 Moyenne CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting 5.4 Moyenne
Suivre cette CVE