CVE-2024-124651: Medium severity ibm datacap vulnerability
IBM Datacap Navigator does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-124651?
CVE-2024-124651 is categorized as a medium severity vulnerability due to its potential to expose sensitive cookie data.
How do I fix CVE-2024-124651?
To fix CVE-2024-124651, ensure that the secure attribute is set on all session cookies and authorization tokens for IBM Datacap Navigator.
Which versions of IBM Datacap are affected by CVE-2024-124651?
CVE-2024-124651 affects all versions of IBM Datacap Navigator and versions up to 9.1.9 of IBM Datacap.
What are the risks associated with CVE-2024-124651?
The risks include potential exposure of session cookies to attackers, leading to unauthorized access and session hijacking.
Can CVE-2024-124651 be exploited remotely?
Yes, CVE-2024-124651 can be exploited remotely through crafted HTTP links that target users.