QwikSec

Security Database

CVE

CWE

Training

CVE-2013-3984

Published: May 26, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

sametime-cve20133984-cookie-flags(84967)

vdb-entry

x_refsource_XF

http://www-01.ibm.com/support/docview.wss?uid=swg21671201

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.