CVE-2020-4780

published 2020-10-12

CVE-2020-4780: OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_spm	—	—
ibm	curam_spm	—	—

CWE-613