Security Flaw in IBM QRadar Incident Forensics Leading to Cookie Exposure
CVE-2015-1993

Currently unrated

Key Information:

Vendor

IBM
Status
Security Qradar Incident Forensics
Vendor
CVE Published:
8 November 2015

What is CVE-2015-1993?

A vulnerability in IBM Security QRadar Incident Forensics versions prior to 7.2.5 Patch 5 fails to set the secure flag for certain cookies during HTTPS sessions. This oversight increases the risk of remote attackers intercepting and capturing these cookies via unsecured HTTP connections, potentially compromising sensitive user information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg21968270
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.