5.9
Moyenne
CVE-2022-38386 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through…
Description
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Security 1.10 | 1.10.0.0 → 1.10.11.0 | Pas de correctif indiqué |
| QRadar Suite for Software 1.10 | 1.10.12.0 → 1.10.19.0 | Pas de correctif indiqué |
| cloud_pak_for_security 1.10 | 1.10.0.0 → 1.10.11.0 | Pas de correctif indiqué |
| qradar_suite 1.10 | 1.10.12.0 → 1.10.19.0 | Pas de correctif indiqué |
Autres CVE de Cloud Pak for Security
Les 55 CVE de Cloud Pak for Security →
CVE-2025-25020
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
6.5
Moyenne
CVE-2025-1334
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows…
4.0
Moyenne
CVE-2025-25021
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
7.2
Élevée
CVE-2025-25022
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
9.6
Critique