NVD

Id
28027  
Name
CVE-2015-7427  
Description
IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x before 7.2.0.1 do not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-11-13  
Modified Date
2015-11-16  
Seq
2015-7427  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147247 28027 CVE-2015-7427 IT10279  View
147248 28027 CVE-2015-7427 http://www-01.ibm.com/support/docview.wss?uid=swg21969342  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10604 JVNDB-2015-005924 IBM DataPower Gateway アプライアンスのファームウェアにおける不特定の Cookie をキャプチャされる脆弱性 IBM DataPower Gateway アプライアンスのファームウェアは、https セッションの不特定の Cookie に secure フラグを設定しないため、不特定の Cookie をキャプチャされる脆弱性が存在します。 CVE-2015-7427 84652 CVE-2015-7427 28027 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005924.html 2015-10-21 2015-11-17 View