CVE-2022-35284

High

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a…

ibm·CWE-565·Published 2022-07-25

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

177 chars

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.

NVDen

177 chars

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.

IBM Security Verify Information Queue versión 10.0.2, podría divulgar información sensible debido a la falta o inseguridad del atributo SameSite para una cookie sensible. ID de IBM X-Force: 230811

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/PR:N/UI:N/A:N/I:N/C:L/AV:N/AC:L/S:U/RC:C/RL:O/E:U
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/PR:N/UI:N/A:N/I:N/C:L/AV:N/AC:L/S:U/RC:C/RL:O/E:U
3.0	Secondary	NVD	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N