💣Exploit CVE-2021-20450 - IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 d

[Maksim]

CVE ID : CVE-2021-20450
Published : May 3, 2024, 5:15 p.m. | 25 minutes ago
Description : IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 196640.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.