GHSA-7xgv-rp93-55qpLowCVSS 3.7

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to...

Published
October 21, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (1)

📋 Description

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

🔗 References (3)