CVE-2016-0351

Published: Feb 21, 2018Modified: Nov 21, 2024

3.7

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID: 111890.

Affected (7)

Products: Ibm: Security Identity Manager Virtual Appliance

Ibm

1 product

Security Identity Manager Virtual Appliance

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.0
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.1
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.2
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.3
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.0
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.1
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.3