Lucene search
PRIOn knowledge basePRION:CVE-2019-4563HistoryOct 29, 2020 - 4:15 p.m.
Authorization
2020-10-2916:15:00
PRIOn knowledge base
www.prio-n.com
3
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 166624.
| CPE | Name | Operator | Version |
|---|---|---|---|
| security_directory_server | eq | 6.4.0.0 |
Related
cve
cve
CVE-2019-4563
2020-10-29 16:15:12
nvd
nvd
CVE-2019-4563
2020-10-29 16:15:12
cvelist
cvelist
CVE-2019-4563
2020-10-28 00:00:00
