What is CVE-2020-4780?

CVE-2020-4780 is a medium-severity vulnerability in Ibm Curam_social_program_management, classified under Insufficient Session Expiration. CVSS score: 5.3/10. Published 2020-10-12.

How severe is CVE-2020-4780?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Ibm Curam_social_program_management

CVE-2020-4780

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized p…

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Ibm Curam_social_program_management — versions 7.0.9.0, 7.0.10.0
Ibm Curam Spm — versions 7.0.9, 7.0.10

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2020-4780?: CVE-2020-4780 is a medium-severity vulnerability in Ibm Curam_social_program_management, classified under Insufficient Session Expiration. CVSS score: 5.3/10. Published 2020-10-12.
How severe is CVE-2020-4780?: Medium severity. CVSS v3 base score is 5.3 out of 10.