CVE-2026-4820

creationtimestamp| type| source ---|---|--- 2026-04-01 22:18:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihpusgg5427...

Security Bulletin: IBM Maximo Application Suite was vulnerable to CVE-2026-4820 because Cookie ltpatoken2_<workspace_name> was not set with secure flag

Summary IBM Maximo Application Suite was vulnerable to CVE-2026-4820 because Cookie ltpatoken2 was not set with secure flag Vulnerability Details CVEID:CVE-2026-4820 DESCRIPTION: IBM Maximo Application Suite does not set the secure attribute on authorization tokens or session cookies. Attackers m...