CVE-2022-22329

🗓️ 13 Sep 2022 20:45:22Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 67 Views

IBM Control Desk 7.6.1 lacks secure attribute on authorization tokens or session cookies, exposing them to interception

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-22329	12 Sep 202200:00	–	attackerkb
CNNVD	IBM Control Desk 安全漏洞	13 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-22329	13 Sep 202220:45	–	cvelist
IBM Security Bulletins	Security Bulletin: Provision to add https and Secure Flag to bayeux_browser cookie for IBM Control Desk.	26 Mar 202502:16	–	ibm
EUVD	EUVD-2022-27475	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22329	13 Sep 202221:15	–	nvd
Prion	Authorization	13 Sep 202221:15	–	prion
Positive Technologies	PT-2022-15367 · Ibm · Ibm Control Desk	13 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

ibm control_deskMatch7.6.0

ibm control_deskMatch7.6.0.1

ibm control_deskMatch7.6.1

ibm control_deskMatch7.6.1.1

ibm control_deskMatch7.6.1.2

ibm control_deskMatch7.6.1.3

AND

linux linux_kernelMatch-

[
  {
    "product": "Control Desk",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.6.1"
      }
    ]
  }
]