CVE-2019-4214

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies

Low · published November 22, 2019

CVSS v3.0
3.7
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/C:L/A:N/UI:N/PR:N/AC:H/S:U/I:N/AV:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Published
2019-11-22T15:21Z
EPSS history
Timeline
  • 22 NOV 15:21Z
    IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies
    cvelistv5