CVE-2024-39734

CVE-2024-39734 is a medium-severity vulnerability affecting IBM Datacap Navigator versions 9.1.5 through 9.1.9. The flaw stems from the failure to set the 'secure' attribute on authorization tokens and session cookies, making them susceptible to interception. An attacker could exploit this by tricking a user into clicking an insecure link, allowing the attacker to capture the cookie values via traffic snooping. While the CVSS score is 4.3, indicating a lower impact (C:L), there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.