Security Advisory
CVE-2015-1994
5
Vulnerability Description
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published Date
November 8, 2015
Official Source
NIST NVD Advisory