← CVE Intelligence

CVE-2024-55897

IBM PowerHA SystemMirror for i information disclosure PUBLISHED

Description (CNA)

IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

Affected (CNA)

Vendor / productVersions
IBM / iaffected 7.4, 7.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.