CVE-2016-5958

CVE-2016-5958 affects IBM Security Privileged Identity Manager. The issue is caused by a failure to set the secure flag on the session cookie in SSL mode, enabling a remote attacker to intercept the cookie over HTTP and obtain sensitive information. The vulnerability is documented in multiple fee...