CVE-2023-35008
First published: Mon Jul 08 2024(Updated: )
IBM Security ReaQta does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security QRadar | <=3.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-35008?
CVE-2023-35008 is categorized as a medium severity vulnerability.
How do I fix CVE-2023-35008?
To fix CVE-2023-35008, ensure that your application sets the secure attribute on authorization tokens and session cookies.
Who is affected by CVE-2023-35008?
CVE-2023-35008 affects users of IBM Security QRadar EDR versions up to 3.12.
What type of attack is possible with CVE-2023-35008?
CVE-2023-35008 allows attackers to steal cookie values through insecure HTTP links.
What is the potential impact of CVE-2023-35008?
The potential impact of CVE-2023-35008 includes unauthorized access to user sessions due to exposed session cookies.
- agent/severity
- agent/last-modified-date
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/event
- agent/softwarecombine
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm security qradar
- version/ibm security qradar/3.12