Description
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | CyberFraud | 1.0.0 – ≤ 1.0.2 | — |
References
- https://www.ibm.com/support/pages/node/7290671 vendor-advisory patch