Description (CNA)
IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Guardium Data Encryption | affected 3.0.0.2; affected 4.0.0.4 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6469407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/196218
ADP enrichment
No English description supplied.