Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-55897

IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

Published

2025-01-03T23:15:08.573

Last Modified

2025-06-20T18:11:09.177

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-614
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm powerha_system_mirror - Yes
Operating System ibm i 7.4 No
Operating System ibm i 7.5 No
References