Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere eXtreme Scale 信息泄露漏洞
Vulnerability Description
IBM WebSphere eXtreme Scale是美国IBM公司的一套分布式高速缓存解决方案。该方案提供高性能、可扩展的高速缓存框架和网格技术，可处理海量事务、降低数据库的性能限制等。 IBM WebSphere Extreme Scale中存在信息泄露漏洞，该漏洞源于程序没有为SSL模式中的会话cookie设置安全标志。攻击者可通过拦截HTTP会话利用该漏洞捕获cookie，获取敏感信息。以下版本受到影响：IBM WebSphere Extreme Scale 8.5版本和8.6版本，7.1.0版
CVSS Information
N/A
Vulnerability Type
N/A