CVE-2013-0529

{"id": "CVE-2013-0529", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-21T14:55:01.080", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC90478", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21640356", "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82611", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."}, {"lang": "es", "value": "El Browser en IBM Sterling Connect:Direct v1.4 anterior a v1.4.0.11 y v1.5 hasta v1.5.0.1 no fija el flag secure para la cookie de sesi\u00f3n en una sesi\u00f3n https, lo que podr\u00eda permitir a atacantes remotos capturar esta cookie en una sesi\u00f3n HTTP."}], "lastModified": "2017-08-29T01:33:05.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3793D730-80A7-41D2-B802-FCACFAFC8AAE"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21B52871-114C-4788-BB8F-36A0D07AB994"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5A5F42A-41C7-4C10-8FF6-6097367E2399"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "568D3453-315F-4686-9ABA-653996BB437D"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBB7D9F3-9CA6-4D87-9218-0A05EAE855A1"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2D4499E-3E98-46EB-815A-3F7768B102F0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40BF04BE-977A-466C-9B39-987E44A3C0EC"}, {"criteria": "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF778B2B-AC96-4D2E-BFDF-2C8BF15E13E0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}