Cookie Transmission Flaw in IBM InfoSphere BigInsights
CVE-2014-0905

Currently unrated

Key Information:

Vendor
IBM
Status
Infosphere Biginsights
Vendor
CVE Published:
17 August 2014

Summary

IBM InfoSphere BigInsights versions 2.0 through 2.1.2 lack proper security measures for the LTPA cookie, specifically not setting the secure flag in HTTPS sessions. This oversight allows potential attackers to intercept cookie transmissions, making sensitive user information vulnerable during unsecured HTTP connections. Implementing secure flag settings is crucial to safeguard against such risks.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21680830
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/91720
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.