Loading HuntDB...

GHSA-q2pp-q5j6-9xfm

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.

Related CVEs

Key Information

GHSA ID
GHSA-q2pp-q5j6-9xfm
Published
May 24, 2022 5:07 PM
Last Modified
May 24, 2022 5:07 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.