Required CVE Record Information
Description
IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 215581.
CVSS 1 Total
Score | Severity | Version | Vector String |
---|---|---|---|
5.9 | MEDIUM | 3.0 | CVSS:3.0/C:H/AC:H/AV:N/A:N/I:N/UI:N/PR:N/S:U/E:U/RL:O/RC:C |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://www.ibm.com/support/pages/node/6573005 x_transferred
- exchange.xforce.ibmcloud.com: ibm-guardium-cve202139072-info-disc (215581) vdb-entryx_transferred