IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. X-Force ID: 229449.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2022-11-14T17:05:53.923Z
Updated: 2024-08-03T09:07:16.083Z
Reserved: 2022-06-22T15:44:19.311Z
Link: CVE-2022-34313
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-14T18:15:17.343
Modified: 2024-11-21T07:09:16.757
Link: CVE-2022-34313
Redhat
No data.