CVE-2022-22493

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting

Low · published October 7, 2022

CVSS v3.0
3.5
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/A:N/UI:R/PR:L/S:U/AC:L/I:L/C:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Published
2022-10-07T17:00Z
EPSS history
Timeline
  • 07 OCT 17:00Z
    IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting
    cvelistv5