CVSS 3.1
3.7 lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2019-4214
Low (3.7) in ibm smartcloud analytics log analysis. EPSS 0.5% chance of exploitation in the next 30 days.
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-311, CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:smartcloud_analytics_log_analysis