Medium severity4.3NVD Advisory· Published Jul 9, 2020· Updated Jun 17, 2026

CVE-2020-4173

Description

IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 174682.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Infosphere Guardium Activity Monitor2 versions
cpe:2.3:a:ibm:infosphere_guardium_activity_monitor:10.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:infosphere_guardium_activity_monitor:10.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_guardium_activity_monitor:11.0:*:*:*:*:*:*:*
IBM/Security Guardium Insights
cpe:2.3:a:ibm:security_guardium_insights:2.0.0:*:*:*:*:*:*:*
IBM/Guardium Activity Insightsllm-fuzzy
Range: 10.6, 11.0
IBM/Infosphere Guardium Database Activity Monitoringcpe-rescue
Range: 10.6

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/174682nvdVDB EntryVendor Advisory
www.ibm.com/support/pages/node/6244924nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000