Information Disclosure Vulnerability in IBM Security Identity Governance and Intelligence

CVE-2020-4970

What is CVE-2020-4970?

IBM Security Identity Governance and Intelligence versions 5.2.4, 5.2.5, and 5.2.6 are susceptible to an information disclosure risk due to improper implementation of HTTP Strict Transport Security (HSTS). This vulnerability permits a remote attacker to exploit man-in-the-middle techniques to intercept sensitive information transmitted between clients and servers. Organizations utilizing the affected versions are advised to implement mitigative measures promptly to secure their environments against potential data breaches.

References