Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-4289 EUVD-2020-25536GHSA-fqq2-7hmc-7rjx

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive inform…

Published Apr 8, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.

Affected products

VendorProductAffectedFixed
IBM Security Information Queue 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 —

References