CVE-2019-4638

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies

Low · published January 28, 2020

CVSS v3.0
3.7
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/A:N/S:U/PR:N/UI:N/AC:H/I:N/C:L/AV:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00792 · 55.9th percentile
Published
2020-01-28T18:30Z
EPSS history
Timeline
  • 28 JAN 18:30Z
    IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies
    cvelistv5