PT-2022-15369 · Ibm · Ibm Control Desk

Published 2022-09-13 · Updated 2023-08-08 · CVE-2022-22330

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Control Desk version 7.6.1

Description The issue is caused by the failure to set the HTTPOnly flag, allowing a remote attacker to obtain sensitive information from the cookie.

Recommendations For IBM Control Desk version 7.6.1, set the HTTPOnly flag to prevent sensitive information from being accessed.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-22330

Affected Products

Ibm Control Desk

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/219126 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22330 · Security Note
• https://ibm.com/support/pages/node/6619739 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22330 · Vendor Advisory