CoreCVE
Back

MEDIUM

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie

Published Oct 19, 2014

Description

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ibm
Published Oct 19, 2014
Updated Aug 6, 2024
Reserved Jul 9, 2014
Link CVE-2014-4830
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-4830
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-4830