OOTB build scripts does not set the secure attribute on... · CVE-2020-4780 · GitHub Advisory Database · GitHub

OOTB build scripts does not set the secure attribute on...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.

References

Published by the National Vulnerability Database

Oct 12, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023