CVE-2020-4665

creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:44+00:00| seen| https://t.me/cibsecurity/16372...

CVE-2020-4665

CVE-2020-4665 affects IBM Sterling File Gateway versions 2.2.0.0–2.2.6.5 and 6.0.0.0–6.0.3.2. Root cause: the product does not set the secure attribute on authorization tokens or session cookies, enabling cookie values to be exposed when a user clicks an http:// link or visits an attacker-control...

Security Bulletin: Cookie Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4665)

Summary IBM Sterling File Gateway has addressed a cookie vulnerability. Vulnerability Details CVEID: CVE-2020-4665 DESCRIPTION: IBM Sterling File Gateway does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:...