Vulnerability Details CVE-2020-4780
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.9%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 5.0
References
Products affected by CVE-2020-4780
-
cpe:2.3:a:ibm:curam_social_program_management:7.0.10.0
-
cpe:2.3:a:ibm:curam_social_program_management:7.0.9.0