CVE-2020-4780

MEDIUM

IBM Curam Social Program Management 7.0.9-7.0.10 - Insufficient Session Expiration via Missing Secure Cookie Attribute

Title source: llm
STIX 2.1

Description

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6346581
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/189158

Scores

CVSS v3 5.3
EPSS 0.0099
EPSS Percentile 57.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-613
Status published
Products (2)
ibm/curam_social_program_management 7.0.9.0
ibm/curam_social_program_management 7.0.10.0
Published Oct 12, 2020
Tracked Since Feb 18, 2026