Cookie Transmission Flaw in IBM InfoSphere BigInsights
CVE-2014-0905

Currently unrated

Key Information:

Vendor

IBM
Status
Infosphere Biginsights
Vendor
CVE Published:
17 August 2014

What is CVE-2014-0905?

IBM InfoSphere BigInsights versions 2.0 through 2.1.2 lack proper security measures for the LTPA cookie, specifically not setting the secure flag in HTTPS sessions. This oversight allows potential attackers to intercept cookie transmissions, making sensitive user information vulnerable during unsecured HTTP connections. Implementing secure flag settings is crucial to safeguard against such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg21680830
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/91720
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.