Information Disclosure Vulnerability in IBM Security Secret Server
CVE-2020-4413

5.9MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
24 June 2020

Summary

IBM Security Secret Server version 10.7 has a vulnerability that could allow remote attackers to gain access to sensitive information. This vulnerability arises from the improper implementation of HTTP Strict Transport Security (HSTS). By exploiting this flaw, attackers may launch man-in-the-middle attacks, enabling them to intercept and manipulate sensitive data transmitted over the network. Users of IBM Security Secret Server are advised to review their configurations and apply any necessary updates to mitigate potential risks.

Affected Version(s)

Security Secret Server 10.7

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.