Session Cookie Vulnerability in IBM Security Identity Governance and Intelligence

CVE-2020-4966

What is CVE-2020-4966?

IBM Security Identity Governance and Intelligence version 5.2.6 contains an information disclosure vulnerability where the secure attribute is not set on authorization tokens or session cookies. This flaw may allow attackers to capture cookie values by tricking users into clicking malicious links. If users interact with these links, their cookies can be exposed through insecure channels, enabling attackers to exploit this information by intercepting traffic. It is essential for users and administrators to implement security measures to safeguard against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References