CVE-2022-35284

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie

Medium · published July 25, 2022

CVSS v3.0
5.3
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/PR:N/UI:N/A:N/I:N/C:L/AV:N/AC:L/S:U/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00775 · 55.3th percentile
Published
2022-07-25T17:20Z
EPSS history
Timeline
  • 25 JUL 17:20Z
    IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie
    cvelistv5