Information disclosure

2020-04-0814:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

JSON

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.

CPENameOperatorVersion
security_information_queueeq1.0.0
security_information_queueeq1.0.1
security_information_queueeq1.0.2
security_information_queueeq1.0.3
security_information_queueeq1.0.4
security_information_queueeq1.0.5

Name	Operator	Version
security_information_queue	eq	1.0.0
security_information_queue	eq	1.0.1
security_information_queue	eq	1.0.2
security_information_queue	eq	1.0.3
security_information_queue	eq	1.0.4
security_information_queue	eq	1.0.5