CVE-2016-2952

IBM BigFix Remote Control is affected by CVE-2016-2952. Versions before 9.1.3 do not enable HSTS, enabling information disclosure via HTTP and allowing remote attackers to obtain sensitive data. The CNVD/NVD entries corroborate an information‑disclosure impact due to missing HSTS. Root cause: HST...