CVE-2018-1480 : What You Need to Know

IBM BigFix Platform versions 9.2.0 through 9.2.14 and 9.5 through 9.5.9 are affected by a vulnerability where the 'HttpOnly' attribute is not set on authorization tokens or session cookies, potentially allowing attackers to hijack user sessions.

Understanding CVE-2018-1480

This CVE involves a security vulnerability in IBM BigFix Platform versions 9.2.0 through 9.2.14 and 9.5 through 9.5.9.

What is CVE-2018-1480?

The vulnerability arises from the absence of the 'HttpOnly' attribute on authorization tokens or session cookies, which could enable attackers to obtain cookie values and compromise user sessions, particularly in the presence of a Cross-Site Scripting vulnerability.

The Impact of CVE-2018-1480

The vulnerability has a CVSS v3.0 base score of 4 (Medium severity) and could lead to unauthorized access to user sessions.

Technical Details of CVE-2018-1480

Vulnerability Description

The 'HttpOnly' attribute is missing on authorization tokens or session cookies in affected versions of IBM BigFix Platform.

Affected Systems and Versions

Affected versions: 9.2.0, 9.2.14, 9.5.0, 9.5.9

Exploitation Mechanism

Attackers could exploit this vulnerability to obtain cookie values and potentially take control of user sessions.

Mitigation and Prevention

Immediate Steps to Take

Apply official fixes provided by IBM to address the vulnerability.
Monitor for any unauthorized access or unusual activities on the BigFix Platform.

Long-Term Security Practices

Regularly update and patch the BigFix Platform to mitigate known vulnerabilities.
Implement secure coding practices to prevent Cross-Site Scripting vulnerabilities.

Patching and Updates

Stay informed about security updates and patches released by IBM for the BigFix Platform.