Description
IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.
Remediation
References
Related Vulnerabilities
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0219)
WordPress Plugin IGIT Posts Slider Widget TimThumb Arbitrary File Upload (1.1)
MySQL CVE-2022-21632 Vulnerability (CVE-2022-21632)
WordPress Plugin GiveWP-Donation and Fundraising Platform Information Disclosure (2.20.2)
WordPress Plugin Simple PDF Viewer Cross-Site Scripting (1.9)