low3.7
CVE-2026-9825
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabl…
Impact
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
Affected products
| Product | Affected versions |
|---|---|
| IBM Cyber Fraud 1.0.0 | through 1.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.