← Volver a CVEs
CVE-2020-4527
MEDIUM5.9
Descripcion
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the Secure flag for the session cookie in TLS mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 182631.
Detalles CVE
Puntuacion CVSS v3.15.9
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Vector de ataqueNETWORK
ComplejidadHIGH
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado7/20/2020
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
ibm:planning_analytics
Debilidades (CWE)
CWE-384
Referencias
https://exchange.xforce.ibmcloud.com/vulnerabilities/182631(psirt@us.ibm.com)
https://www.ibm.com/support/pages/node/6249981(psirt@us.ibm.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/182631(af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/6249981(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.