IBM Security Verify Governance Vulnerability Could Lead to Sensitive Information Theft

CVE-2023-35888

Summary

The vulnerability in IBM Security Verify Governance 10.0.2 arises from the improper configuration of HTTP Strict Transport Security (HSTS), which can leave the product exposed to potential exploitation. A remote attacker may leverage this flaw to execute man-in-the-middle attacks, thereby gaining unauthorized access to sensitive information transmitted over the network. This vulnerability emphasizes the importance of properly configuring security protocols to safeguard data integrity and confidentiality.

References