VULNERABILITY INTELLIGENCE

CVE-2019-4330

CVSS score4.3 MEDIUM
EPSS probability1.12%
CISA KEVNot currently listed
Published2019-10-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.

Weakness classification

  • CWE-565: Reliance on Cookies without Validation and Integrity Checking

Primary references