CVE-2023-33860
Last modified
CVE-2023-33860 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Qradar Edr | 3.12 |
References
- https://www.ibm.com/support/pages/node/7159770Vendor Advisory
- https://www.ibm.com/support/pages/node/7159770Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33860?
How severe is CVE-2023-33860?
How do I fix CVE-2023-33860?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33852IBM Security Guardium 11.4 is vulnerable to SQL injection. A…5.4
- CVE-2023-33854IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak…5.3
- CVE-2023-33855Under certain conditions, RSA operations performed by IBM Co…3.7
- CVE-2023-33857IBM InfoSphere Information Server 11.7 could allow a remote …5.3
- CVE-2023-33859IBM Security QRadar EDR 3.12 could disclose sensitive inform…5.3
- CVE-2023-3386Improper Neutralization of Special Elements used in an SQL C…9.8
- CVE-2023-33861IBM Security ReaQta EDR 3.12 could allow an attacker to spoo…6.5
- CVE-2023-33863SerialiseValue in RenderDoc before 1.27 allows an Integer Ov…9.8
- CVE-2023-33864StreamReader::ReadFromExternal in RenderDoc before 1.27 allo…9.8
- CVE-2023-33865RenderDoc before 1.27 allows local privilege escalation via …7.8
- CVE-2023-33866A use-after-free vulnerability exists in the JavaScript engi…8.8
- CVE-2023-33867Improper buffer restrictions in some Intel(R) RealSense(TM) …7.8
Are you affected by CVE-2023-33860?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST