VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 8, 2015· Updated Jun 17, 2026

CVE-2015-1993

CVE-2015-1993

Description

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Security Qradar Incident Forensics7 versions
    cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*
    • (no CPE)range: <7.2.5 Patch 5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.