Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Security Secret Server 安全漏洞
Vulnerability Description
IBM Security Secret Server是美国IBM公司的一套特权访问管理解决方案。该产品支持密码管理、特权账号识别和特权会话访问监控记录等功能。 IBM Security Secret Server 10.7版本中存在安全漏洞，该漏洞源于程序未在授权令牌或会话cookie上设置安全属性。攻击者可借助中间人技术利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A