IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 257102.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2023-06-08T00:35:17.555Z

Updated: 2024-08-02T15:54:13.759Z

Reserved: 2023-05-23T00:31:59.438Z

Link: CVE-2023-33847

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-06-08T01:15:09.120

Modified: 2024-11-21T08:06:04.123

Link: CVE-2023-33847

cve-icon Redhat

No data.