CVE-2019-4563

IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 166624.

• CWE-384

• https://exchange.xforce.ibmcloud.com/vulnerabilities/166624VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6356607Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/166624VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6356607Patch, Vendor Advisory

Published

Oct 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-4557IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker t…7.5
• CVE-2019-4558A security vulnerability has been identified in all levels o…7.8
• CVE-2019-4559IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive info…5.3
• CVE-2019-4560IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.…6.5
• CVE-2019-4561IBM Security Identity Manager 6.0.0 could allow a remote att…8.8
• CVE-2019-4562IBM Security Directory Server 6.4.0 stores sensitive informa…5.3
• CVE-2019-4564IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 …6.1
• CVE-2019-4565IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not re…7.5
• CVE-2019-4566IBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user…5.5
• CVE-2019-4568IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a re…5.9
• CVE-2019-4569IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulner…5.4
• CVE-2019-4570IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates a…5.3