CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0529

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 46.1%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2013-0529

Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.0

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.0
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.10

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.10
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.2

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.2
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.3

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.3
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.6

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.6
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.7

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.7
Ibm » Sterling Connect Direct User Interface » Version: 1.5.0.0

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.0
Ibm » Sterling Connect Direct User Interface » Version: 1.5.0.1

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0529

Products

Pricing

Contact Us