3.7
Faible
CVE-2022-33167 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote…
Description
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 228587.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Directory Integrator | 7.2.0 | Pas de correctif indiqué |
| Security Verify Directory Integrator | 10.0.0 | Pas de correctif indiqué |
Autres CVE de Security Directory Integrator
Les 10 CVE de Security Directory Integrator →
CVE-2024-28765
IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote…
5.3
Moyenne
CVE-2024-28766
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive…
2.4
Faible
CVE-2024-28770
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure…
4.8
Moyenne
CVE-2024-28771
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure…
4.8
Moyenne