CVE-2018-1804: Medium severity oracle access manager vulnerability
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this security vulnerability?
The vulnerability ID is CVE-2018-1804.
What is the severity of CVE-2018-1804?
The severity of CVE-2018-1804 is medium.
What is the affected software for CVE-2018-1804?
The affected software for CVE-2018-1804 is IBM Security Access Manager Appliance versions 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0.
What is the description of CVE-2018-1804?
CVE-2018-1804 is a vulnerability in IBM Security Access Manager Appliance that does not set the secure attribute on authorization tokens or session cookies, allowing an attacker to obtain sensitive information using man-in-the-middle techniques.
How can I fix CVE-2018-1804?
To fix CVE-2018-1804, upgrade to a version of IBM Security Access Manager Appliance that sets the secure attribute on authorization tokens and session cookies.