CVE-2020-4597

Vulnerability

IBM Security Guardium Insights version 2.0.2 does not set the secure attribute on authorization tokens or session cookies. This means cookies are transmitted over unencrypted HTTP connections, violating best practices for cookie security. [1]

Exploitation

An attacker can craft an http:// link to the application or plant such a link on a site the user visits. If the user clicks the link, the browser sends the cookie to the insecure URL. The attacker can then sniff the network traffic to capture the cookie value. No authentication or special privileges are required for the attacker beyond the ability to deliver the link and monitor network traffic. [1]

Impact

Successful exploitation allows the attacker to obtain the session cookie or authorization token, potentially gaining unauthorized access to the Guardium Insights application and the sensitive data it manages. This compromises confidentiality and could lead to further attacks. [1]

Mitigation

IBM has addressed this vulnerability in a security update. Users should apply the fix as described in the IBM Security Bulletin [1]. No workarounds are documented in the available references. [1]