CVE-2022-38386mediumCWE-1275

CVE-2022-38386: medium-severity vulnerability in IBM Cloud Pak for Security

IBM Cloud Pak for Security information disclosure

Published · Updated

Follow this CVE+ Monitor Cloud Pak for Security+ Monitor QRadar Suite for

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.5%
In short

IBM Cloud Pak for Security and QRadar Suite fail to properly protect sensitive cookies by not setting the SameSite attribute, allowing attackers to intercept and steal this information through man-in-the-middle attacks.

Technical detail

The vulnerability stems from missing SameSite cookie attribute configuration in IBM Cloud Pak for Security (versions 1.10.0.0–1.10.11.0) and IBM QRadar Suite (versions 1.10.12.0–1.10.19.0). An attacker positioned on the network path between client and server can exploit this to capture sensitive session cookies and gain unauthorized access.

Summary generated and translated by AI from the official description.
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Cloud Pak for SecurityIBM · QRadar Suite for Software
Related CVEs — IBM Cloud Pak for Security

In the same product, most dangerous first.

CVE-2021-29696HIGHCVE-2021-29696EPSS 2.5%CVE-2020-4627MEDIUMCVE-2020-4627EPSS 1.6%CVE-2020-4625MEDIUMCVE-2020-4625EPSS 1.5%CVE-2021-29697MEDIUMCVE-2021-29697EPSS 1.4%CVE-2020-4815MEDIUMCVE-2020-4815EPSS 1.3%CVE-2020-4628MEDIUMCVE-2020-4628EPSS 1.3%