CVE-2020-4233: Medium severity ibm security identity governance and intelligence vulnerability
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360.
Other sources
IBM Security Identity Governance Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this IBM Security Identity Governance Virtual Appliance vulnerability?
The vulnerability ID is CVE-2020-4233.
What is the severity of CVE-2020-4233?
The severity of CVE-2020-4233 is medium (5.3).
How does this vulnerability in IBM Security Identity Governance Virtual Appliance occur?
This vulnerability occurs due to the failure to set the secure flag for the session cookie in SSL mode.
How can a remote attacker exploit this vulnerability in IBM Security Identity Governance Virtual Appliance?
A remote attacker can exploit this vulnerability by intercepting the transmission of the session cookie within an HTTP session.
Are there any references available for more information about CVE-2020-4233?
Yes, you can find more information about CVE-2020-4233 at the following references: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/175360) and [Reference 2](https://www.ibm.com/support/pages/node/6207912).