Information Exposure in IBM Spectrum Protect Plus Products

CVE-2020-4783

What is CVE-2020-4783?

IBM Spectrum Protect Plus versions 10.1.0 through 10.1.6 have a vulnerability that could allow a remote attacker to gain access to sensitive information. This issue arises from the failure to properly implement HTTP Strict Transport Security, leaving the system susceptible to man-in-the-middle attacks. Attackers can exploit this flaw to intercept data between the user and the server, potentially leading to unauthorized data exposure and security breaches.

References