IBM Rational Publishing Engine

• CVE-2020-4316 Medium 4.3 IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to 1.2%