CVE-2016-0353

CVE-2016-0353 affects IBM Security Privileged Identity Manager Virtual Appliance 2.0 prior to 2.0.2 FP8. The root cause is that the session cookie was not marked as Secure in SSL, allowing interception when transmitted over HTTPS/HTTP in a mixed context and potentially enabling cookie theft. The ...