CVEvulnerability
CVE-2014-6153
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected configurations
• ibm websphere service registry and repository 6.3.0
• ibm websphere service registry and repository 6.3.0.1
• ibm websphere service registry and repository 6.3.0.2
• ibm websphere service registry and repository 6.3.0.3
• ibm websphere service registry and repository 6.3.0.4
• ibm websphere service registry and repository 6.3.0.5
• ibm websphere service registry and repository 7.0.0
• ibm websphere service registry and repository 7.0.0.1
• ibm websphere service registry and repository 7.0.0.2
• ibm websphere service registry and repository 7.0.0.3
• ibm websphere service registry and repository 7.0.0.4
• ibm websphere service registry and repository 7.0.0.5
• ibm websphere service registry and repository 7.5.0.0
• ibm websphere service registry and repository 7.5.0.1
• ibm websphere service registry and repository 7.5.0.2
• ibm websphere service registry and repository 7.5.0.3
• ibm websphere service registry and repository 7.5.0.4
• ibm websphere service registry and repository 8.0
• ibm websphere service registry and repository 8.0.0.1
• ibm websphere service registry and repository 8.0.0.2
• ibm websphere service registry and repository 8.5
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV64010 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21693379 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693389 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97622 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV64010 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21693379 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693389 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97622 exchange.xforce.ibmcloud.com