CVE-2018-1480 in BigFix Platforminfo

Zusammenfassung

von MITRE

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookies. If a Cross-Site Scripting vulnerability also existed attackers may be able to get the cookie values via malicious JavaScript and then hijack the user session. IBM X-Force ID: 140762.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

IBM Corporation

Reservieren

13.12.2017

Veröffentlichung

12.12.2018

Moderieren

akzeptiert

Eintrag

VDB-127898

CPE

bereit

EPSS

0.00120

KEV

nein

Aktivitäten

very low

Sektor

Telecommunication, Lawfirm, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2018-1480
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2018-1480
CVE Detailshttps://www.cvedetails.com/cve/CVE-2018-1480/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!