CVE-2023-38363

CVE-2023-38363 affects IBM CICS TX Advanced 10.1. The issue is that authorization tokens and session cookies are not marked with the Secure attribute, allowing an attacker to obtain cookie values by enticing a user to click an http:// link or by embedding the link on a site the user visits. The i...