Vulnetix
Try Vulnetix Request Demo
CVE-2023-46179 PUBLISHED CVSS 4.300000190734863 MEDIUM

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 269683.

EPSS 0.04% · 10.5th percentile

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
0.04%
10.5th percentile

Affected Products

VendorProductVersions
IBMSecure Proxy6.0.3, 6.1.0
ibmsterling_secure_proxy6.0.3, 6.1.0

Timeline

References

Open in Interactive Console →