Lucene search
PRIOn knowledge basePRION:CVE-2019-4616HistoryFeb 05, 2020 - 4:15 p.m.
Authorization
2020-02-0516:15:00
PRIOn knowledge base
www.prio-n.com
2
IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 168644.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_automation_manager | eq | 3.2.1.0 |
Related
cvelist
cvelist
CVE-2019-4616
2020-02-04 00:00:00
cve
cve
CVE-2019-4616
2020-02-05 16:15:11
ibm
ibm
nvd
nvd
CVE-2019-4616
2020-02-05 16:15:11