CVE-2018-1804

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703.

• CWE-384

• http://www.ibm.com/support/docview.wss?uid=ibm10787785Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149703VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10787785Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149703VDB Entry, Vendor Advisory

Published

Dec 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18024In ImageMagick 7.0.8-13 Q16, there is an infinite loop in th…
• CVE-2018-18025In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer ov…
• CVE-2018-18026IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possi…
• CVE-2018-18029Navigate CMS has Stored XSS via the navigate.php Title field…
• CVE-2018-1803IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…6.1
• CVE-2018-18035A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 P…
• CVE-2018-1805IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…4.3
• CVE-2018-18056An issue was discovered in the Texas Instruments (TI) TM4C, …
• CVE-2018-18058An issue was discovered in Bitdefender Engines before 7.7666…
• CVE-2018-18059An issue was discovered in Bitdefender Engines before 7.7667…
• CVE-2018-18060An issue was discovered in Bitdefender Engines before 7.7680…
• CVE-2018-18061An issue was discovered in dialog.php in tecrail Responsive …