Threats tagged 'ghsa-h425-9xw7-wc9p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	3.5	CVE-2026-8640IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite Low3.52026-11-08GCVE DatabaseCVE-2026-8640 IBM Security Verify Directory versions 10.0.0 through 10.0.4 and 11.0.0 do not set the SameSite attribute on session cookies. This omission makes the application vulnerable to Cross-Site Request Forgery (CSRF) attacks, where an attacker could trick authenticated users into sending unauthorized requests. The vulnerability has a low severity score and does not impact confidentiality or availability. Report on CVE-2026-8640 Vulnerability CWE-352 #ghsa-h425-9xw7-wc9p	GCVE Database	2026-11-08

Page 1 of 1