CVE-2014-4830: Medium severity ibm qradar security information and event manager vulnerability
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4830?
CVE-2014-4830 is classified as a medium severity vulnerability due to its potential impact on session security.
How do I fix CVE-2014-4830?
To fix CVE-2014-4830, configure your session management to include the HTTPOnly flag in Set-Cookie headers.
What systems are affected by CVE-2014-4830?
CVE-2014-4830 affects IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2.
What kind of attack could exploit CVE-2014-4830?
An attacker could exploit CVE-2014-4830 through cross-site scripting (XSS) to access sensitive session information.
Is CVE-2014-4830 related to web security?
Yes, CVE-2014-4830 is related to web security as it involves cookie management and protection against unauthorized access.