VDB

CVE-2023-46179

CVE-2023-46179 PUBLISHED CVSS 4.300000190734863 MEDIUM

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 269683.

EPSS 0.28% · 19.5th percentile

Risk Scores

CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
0.28%
19.5th percentile

Affected Products

VendorProductVersions
IBMSecure Proxy6.0.3, 6.1.0
ibmsterling_secure_proxy6.0.3, 6.1.0

Timeline

  • Mar 15, 2024 CVE Published
  • Mar 16, 2024 EPSS Score
  • Apr 12, 2024 EPSS Score
  • May 8, 2024 EPSS Score
  • Jun 4, 2024 EPSS Score
  • Jun 30, 2024 EPSS Score
  • Jul 27, 2024 EPSS Score
  • Aug 23, 2024 EPSS Score
  • Sep 18, 2024 EPSS Score
  • Oct 15, 2024 EPSS Score
  • Nov 11, 2024 EPSS Score
  • Dec 8, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›