CVE-2015-1993
IBM Security QRadar Incident Forensics <7.2.5.5 - Info Disclosure
Title source: llmDescription
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21968270
Scores
EPSS
0.0121
EPSS Percentile
65.2%
Details
Status
published
Products (6)
ibm/security_qradar_incident_forensics
7.2.0
ibm/security_qradar_incident_forensics
7.2.1
ibm/security_qradar_incident_forensics
7.2.2
ibm/security_qradar_incident_forensics
7.2.3
ibm/security_qradar_incident_forensics
7.2.4
ibm/security_qradar_incident_forensics
7.2.5
Published
Nov 08, 2015
Tracked Since
Feb 18, 2026