Description
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703.
Remediation
References
Related Vulnerabilities
WordPress Plugin SoundPress Cross-Site Scripting (2.2.6)
WordPress Plugin Instagram Plugin-InstaLinker Cross-Site Scripting (1.1.1)
WordPress Plugin Chat-Support Board-WordPress Chat Cross-Site Scripting (1.2.8)
WordPress Plugin Premmerce Permalink Manager for WooCommerce Local File Inclusion (2.3.10)