CVE-2026-9825: CVE-2026-9825: güvenlik açığı

Açıklama (NVD)

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

Özet bilgiler

CVSS v3.1

3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,24 (yüzdelik 16)

CWE

CWE-617

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-617