Vulnerabilities (CVE)

Filtered by CWE-1275
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-43173 1 Ibm 1 Concert 2024-10-25 N/A 3.7 LOW
IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.
CVE-2022-38386 2024-05-01 N/A 5.9 MEDIUM
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.