NetSight
IP …
medium4.3

CVE-2014-4830

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easie…

Impact

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
Versions 7.1.0, 7.2.0

Weakness classification

CWE-264

References