Sensitive Information Disclosure in IBM Tivoli Endpoint Manager

CVE-2017-1229

What is CVE-2017-1229?

A security issue in IBM Tivoli Endpoint Manager allows remote attackers to exploit improper configuration of HTTP Strict Transport Security (HSTS), leading to potential sensitive information disclosure. By employing man-in-the-middle attacks, an attacker can intercept and read sensitive data transmitted over the network, increasing the risk of unauthorized access to confidential information.

References