Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177234.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Business Automation Content Analyzer Cloud 安全漏洞
Vulnerability Description
IBM Business Automation Content Analyzer是美国国际商业机器公司(IBM)的一款新的基于云的 API Web Service。该服务旨在与 IBM Automation Platform for Digital Business 或任何非 IBM 内容/流程系统配合使用。Content Analyzer 可帮助您快速加速文档数据的提取和分类 - 无论您目前使用何种软件。Content Analyzer 可使用 OCR 和 PDF 文本提取来对非结构化文档内容进行数字化
CVSS Information
N/A
Vulnerability Type
N/A