CVE-2019-4330 Vulnerability Details

  /     /     /  

CVE-2019-4330 Metadata Quick Info

CVE Published: 28/10/2019 | CVE Updated: 16/09/2024 | CVE Year: 2019
Source: ibm | Vendor: IBM | Product: Security Guardium Big Data Intelligence
Status : PUBLISHED

---

CVE-2019-4330 Description

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Obtain Information
Source: IBM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).