Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.

Product Status

Learn more

Versions 11 Total

Default Status: unknown

affected

  • affected at 9.0 
  • affected at 9.1 
  • affected at 9.2 
  • affected at 9.2.1 
  • affected at 9.3.0 
  • affected at 9.4.0 
  • affected at 9.5.0 
  • affected at 10.0.0 
  • affected at 10.1.0 
  • affected at 10.2.0 
  • affected at 10.3.0 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.