CVE-2022-34469

CVE-2022-34469 affects Mozilla Firefox for Android. The issue allows a user to bypass a TLS certificate error on domains protected by HSTS, enabling bypass of certificate warnings (reported only on Android; other OSes unaffected). The vulnerability is addressed in Firefox 102 per the linked advis...

CVE-2022-34469

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. This bug...

PT-2022-3283

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 102 Description The issue is related to the handling of TLS Certificate errors on domains protected by the HSTS header. When such an error occurs, the browser should prevent the user from bypassing the...

CVE-2019-4326: Improper Encoding or Escaping of Output

"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."...

PT-2019-16941 · Ibm · Ibm Security Information Queue

Name of the Vulnerable Software and Affected Versions: IBM Security Information Queue ISIQ versions 1.0.0 through 1.0.2 Description: The issue arises from the missing HTTP Strict Transport Security header in the affected software. This allows users to potentially navigate to the unencrypted versi...

CVE-2017-5784

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5782

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5784

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

Hardcoded credentials

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5782

CVE-2017-5782 concerns a missing HSTS header vulnerability in HPE Matrix Operating Environment (MOE) version v7.6. The issue, described as a missing HSTS header, is highlighted across multiple sources (NVD entry and CNVD/CVE mirrors). According to the NVD metrics, this vulnerability has a network...

CVE-2017-5782

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5784

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5784

CVE-2017-5784 : A missing HSTS header vulnerability affects Hewlett Packard Enterprise’s Matrix Operating Environment (MOE) version 7.6. The CVE entry notes HSTS misconfiguration as the underlying issue, with CVSS metrics indicating a Medium severity (CVSSv2 base 5.8, CVSSv3 base 6.5). Connected ...

CVE-2017-5784: Improper Input Validation

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5782: Improper Input Validation

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2016-0297: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Endpoint Manager - Mobile Device Management MDM could allow a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header through man in the middle techniques...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...

CVE-2013-3046

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests...