https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:04:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278801 EUVD-2026-278801 https://cve.radiocsirt.org/vuln/euvd-2026-278801 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4820 <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.</p> <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4820 https://cve.radiocsirt.org/vuln/ghsa-7cvp-jxjh-qvvf <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.</p> <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.</p> https://cve.radiocsirt.org/vuln/ghsa-7cvp-jxjh-qvvf https://cve.radiocsirt.org/vuln/va-26-097-02 <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the &#39;secure&#39; attribute on authorization tokens or session cookies. An unauthenticated attacker can steal cookies by directing users to a malicious http:// link and snooping user traffic. Fixed in 9.1.8, 9.0.19, 8.11.30, and 8.10.33.</p> <p>IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the &#39;secure&#39; attribute on authorization tokens or session cookies. An unauthenticated attacker can steal cookies by directing users to a malicious http:// link and snooping user traffic. Fixed in 9.1.8, 9.0.19, 8.11.30, and 8.10.33.</p> https://cve.radiocsirt.org/vuln/va-26-097-02