CVE-2020-4780

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10

Medium · published October 12, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/PR:N/AV:N/A:N/I:N/AC:L/S:U/UI:R/C:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Published
2020-10-12T13:05Z
EPSS history
Timeline
  • 12 OCT 13:05Z
    OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10
    cvelistv5