TI-2023-19684 CVE-2023-38281 · GHSA-6jv7-gp56-rq3m
Multiple Vulnerabilities in IBM Cloud Pak System
Priority LOW 30
IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies.
3 records
IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies.
IBM Cloud Pak System is vulnerable to cross-site scripting.
IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.