CVE-2020-4146

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129...

CVE-2020-4146

CVE-2020-4146 affects IBM Security SiteProtector System 3.1.1. The root cause is missing the HttpOnly flag, enabling a remote attacker to obtain sensitive information from the Web interface. Documentsconfirm the affected product/version and describe the impact as information disclosure. Public-fa...

Security Bulletin: IBM Security SiteProtector System is affected by vulnerability CVE-2020-4146

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Core XPU Vulnerability Details CVEID: CVE-2020-4146 DESCRIPTION: IBM SiteProtector Appliance could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker...