PT-2014-6148 · Ibm · Ibm Security Qradar Siem

Publicado

2014-10-19

·

Atualizado

2017-08-29

·

CVE-2014-4830

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2
Description The issue allows remote attackers to obtain potentially sensitive information via script access to a session cookie, as the HTTPOnly flag is not included in the Set-Cookie header.
Recommendations For IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2, consider configuring the Set-Cookie header to include the HTTPOnly flag to prevent script access to the session cookie.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4830

Produtos afetados

Ibm Security Qradar Siem