PT-2024-12447 · Ibm · Ibm Security Qradar Edr

Published 2024-07-10 · Updated 2025-05-19 · CVE-2023-33860

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security QRadar EDR version 3.12

Description The issue concerns the failure to set the secure attribute on authorization tokens or session cookies. This allows attackers to obtain cookie values by sending a user a link to an insecure site or by planting such a link on a site the user visits. The cookie will be sent to the insecure link, enabling the attacker to obtain the cookie value by snooping the traffic.

Recommendations For IBM Security QRadar EDR version 3.12, consider setting the secure attribute on authorization tokens or session cookies to prevent them from being sent over insecure connections. As a temporary workaround, restrict access to sensitive areas of the application that use these cookies until a proper fix is applied.

Fix

Weakness Enumeration

CWE-614

Related Identifiers

CVE-2023-33860

Affected Products

Ibm Security Qradar Edr

References · 10

• https://ibm.com/support/pages/node/7159770 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33860 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33860 · Vendor Advisory
• https://t.me/cvenotify/122949 · Telegram Post
• https://t.me/cvenotify/88649 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/257702 · Note
• https://twitter.com/CVEnew/status/1811062878285312492 · Twitter Post
• https://t.me/cvedetector/549 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1811107103727038838 · Twitter Post
• https://t.me/cvenotify/85696 · Telegram Post