CVE-2020-4289

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the…

Medium · published April 8, 2020

CVSS v3.0
5.3
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/S:U/I:N/C:L/PR:N/AC:L/UI:N/AV:N/A:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01665 · 76.6th percentile
Published
2020-04-08T14:05Z
EPSS history
Timeline
  • 08 APR 14:05Z
    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the…
    cvelistv5