IBM PowerHA SystemMirror for i 7.4 and 7.5
does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7180036 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Jun 2025, 18:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.ibm.com/support/pages/node/7180036 - Vendor Advisory | |
| First Time |
Ibm powerha System Mirror
Ibm i Ibm |
|
| CPE | cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:powerha_system_mirror:-:*:*:*:*:*:*:* |
13 Mar 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
03 Jan 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-03 23:15
Updated : 2025-06-20 18:11
NVD link : CVE-2024-55897
Mitre link : CVE-2024-55897
JSON object : View
Products Affected
ibm
- i
- powerha_system_mirror
CWE
No CWE.