Authorization

2019-11-2216:15:00

PRIOn knowledge base

www.prio-n.com

3.6 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

JSON

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185.

CPENameOperatorVersion
smartcloud_analytics_log_analysisge1.3.1
smartcloud_analytics_log_analysisle1.3.5

CPE	Name	Operator	Version
	smartcloud_analytics_log_analysis	ge	1.3.1
	smartcloud_analytics_log_analysis	le	1.3.5

References

exchange.xforce.ibmcloud.com/vulnerabilities/159185

www.ibm.com/support/pages/node/1110171