IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.0 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud