Low severity3.7NVD Advisory· Published Jan 28, 2020· Updated Jun 17, 2026

CVE-2019-4638

Description

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Secret Server
cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*
Range: <10.7.000059
IBM/IBM Security Secret Serverllm-fuzzy2 versions
<=10.7+ 1 more
- (no CPE)range: <=10.7
- (no CPE)range: 10.7

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/1283236nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/170044nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000