Security Bulletin: Insecure Path Attribute in IBM Operations Analytics – Log Analysis (CSRFToken , LtpaToken2)

CERT-LatestNews ThreatsCybercrime
Share this post: The ‘path’ attribute signifies the URL or path for which the cookie is valid. If the path attribute is set to the web server root “/”directory, then the application along with the hosting web server becomes vulnerable to multiple attacks. The path is set to “/” – https://LA_HOSTNAME:9987/Unity.