CVE-2020-14248

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2020-14248

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2020-14248

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2020-14248

CVE-2020-14248 concerns IBM BigFix Inventory up to v10.0.2, where a session cookie does not set the secure flag in HTTPS. The underlying issue is that the cookie could be sent over HTTP, potentially allowing remote attackers to capture it. Public documentation in the provided connected sources co...