Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-33167

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 228587.

Published

2024-07-30T17:15:10.020

Last Modified

2024-11-21T07:07:38.277

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.7 (LOW)

Weaknesses
  • Type: Secondary
    CWE-1004
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm security_directory_integrator 7.2.0 Yes
Application ibm security_verify_directory_integrator 10.0.0 Yes
References