Information Disclosure Vulnerability in IBM Security Secret Server

CVE-2020-4413

Summary

IBM Security Secret Server version 10.7 has a vulnerability that could allow remote attackers to gain access to sensitive information. This vulnerability arises from the improper implementation of HTTP Strict Transport Security (HSTS). By exploiting this flaw, attackers may launch man-in-the-middle attacks, enabling them to intercept and manipulate sensitive data transmitted over the network. Users of IBM Security Secret Server are advised to review their configurations and apply any necessary updates to mitigate potential risks.

References