CVE-2024-55897

Summary: CVE-2024-55897 affects IBM PowerHA SystemMirror for IBM i versions 7.4 and 7.5. The issue is that authorization tokens and session cookies do not have the Secure attribute set, enabling cookie values to be exposed if a user visits an insecure (HTTP) link or a page with such a link, allow...

CVE-2015-5005

CVE-2015-5005 affects IBM PowerHA SystemMirror CSPOC on AIX 6.1 and 7.1. An authenticated remote user added to the cluster password-change list can exploit a shipped script to perform a privileged action, gaining root via an "su root" operation. The vulnerability is tied to the CSPOC feature that...