CVE-2023-35008: Medium severity ibm security qradar vulnerability
IBM Security ReaQta does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35008?
CVE-2023-35008 is categorized as a medium severity vulnerability.
How do I fix CVE-2023-35008?
To fix CVE-2023-35008, ensure that your application sets the secure attribute on authorization tokens and session cookies.
Who is affected by CVE-2023-35008?
CVE-2023-35008 affects users of IBM Security QRadar EDR versions up to 3.12.
What type of attack is possible with CVE-2023-35008?
CVE-2023-35008 allows attackers to steal cookie values through insecure HTTP links.
What is the potential impact of CVE-2023-35008?
The potential impact of CVE-2023-35008 includes unauthorized access to user sessions due to exposed session cookies.