CVE-2013-0529: Medium severity ibm sterling connect:direct vulnerability
The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0529?
CVE-2013-0529 is classified as a medium severity vulnerability due to the potential for session cookie interception.
How do I fix CVE-2013-0529?
To fix CVE-2013-0529, ensure that the session cookie has the secure flag set in HTTPS sessions.
What systems are affected by CVE-2013-0529?
CVE-2013-0529 affects IBM Sterling Connect:Direct versions 1.4.0.0 through 1.4.0.10 and 1.5.0.0 through 1.5.0.1.
Can CVE-2013-0529 lead to data exposure?
Yes, CVE-2013-0529 can lead to data exposure as attackers may intercept session cookies during transmission.
Is there a workaround for CVE-2013-0529 until a patch is applied?
A possible workaround for CVE-2013-0529 is to limit the use of HTTP for sensitive transactions until the secure flag issue is resolved.