Vulnerability in IBM Security Privileged Identity Manager Virtual Appliance

CVE-2016-5966

What is CVE-2016-5966?

The IBM Security Privileged Identity Manager Virtual Appliance is susceptible to a vulnerability where improper implementation of HTTP Strict Transport Security (HSTS) may allow remote attackers to intercept sensitive information. This can lead to data leakage through man-in-the-middle attacks, potentially compromising the security of user credentials and other confidential data.

References