CVEvulnerability
CVE-2012-5936
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected configurations
• ibm sterling b2b integrator 5.1
• ibm sterling b2b integrator 5.2
• ibm sterling file gateway 2.1
• ibm sterling file gateway 2.2
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21627985 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80401 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21627985 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80401 exchange.xforce.ibmcloud.com