Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Security Guardium Big Data Intelligence 安全漏洞
Vulnerability Description
IBM Security Guardium Big Data Intelligence（SonarG）是美国IBM公司的一套大数据安全智能解决方案。该方案具有交互式数据探索、自动连接分析和用户活动分析等特点。 IBM Security Guardium Big Data Intelligence (SonarG) 4.0版本中存在安全漏洞，该漏洞源于程序没有为HTTPS会话中的cookies设置Secure属性，造成用户代理通过HTTP会话发送明文形式的cookies。攻击者可利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A