IBM Security Directory Integrator和IBM Security Verify Directory Integrator 安全漏洞

🗓️ 27 Jan 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

A vulnerability in Directory Integrator 7.2.0 and Verify Directory Integrator 10.0.0 due to an unset security attribute could enable session hijacking.

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: Security Vulnerability fixed in IBM Security Directory Integrator (CVE-2024-28771, CVE-2024-28770, CVE-2024-28766)	24 Jul 202415:42	–	ibm
BDU FSTEC	The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools lies in the absence of a “Secure” flag in the session cookies. This allows attackers to gain unauthorized access to protected information.	3 Feb 202500:00	–	bdu_fstec
Circl	CVE-2024-28770	27 Jan 202501:29	–	circl
CVE	CVE-2024-28770	27 Jan 202501:12	–	cve
Cvelist	CVE-2024-28770 IBM Security Directory Integrator information disclosure	27 Jan 202501:12	–	cvelist
EUVD	EUVD-2024-25856	3 Oct 202520:07	–	euvd
NVD	CVE-2024-28770	27 Jan 202502:15	–	nvd
OSV	CVE-2024-28770	27 Jan 202502:15	–	osv
Positive Technologies	PT-2024-10411 · Ibm · Ibm Security Directory Integrator +1	10 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-28770	23 May 202507:45	–	redhatcve