VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 10, 2024· Updated Jun 17, 2026

CVE-2023-33860

CVE-2023-33860

Description

IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Security Qradar EDR2 versions
    cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:*
    • (no CPE)range: <=3.12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.