CVE-2020-4780

5.3 mediumEPSS 1.0%

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2020-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:curam_social_program_management

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/189158
https://www.ibm.com/support/pages/node/6346581
https://exchange.xforce.ibmcloud.com/vulnerabilities/189158
https://www.ibm.com/support/pages/node/6346581

Check your stack JSON