CVE-2026-9825
Thấp 3.7
CWE-617
Công bố 05:21 21/10/2026
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Tham khảo
PoC (0)
Chưa thấy PoC public.