CVE-2015-0102 Vulnerability Details

  /     /     /  

CVE-2015-0102 Metadata Quick Info

CVE Published: 05/02/2020 | CVE Updated: 06/08/2024 | CVE Year: 2015
Source: ibm | Vendor: IBM | Product: Workflow for Bluemix
Status : PUBLISHED

---

CVE-2015-0102 Description

IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Other
Source: IBM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).