CVE-2017-1464

IBM TRIRIGA is affected by CVE-2017-1464 due to the failure to enable HTTP Strict Transport Security (HSTS), enabling a remote attacker to obtain sensitive information via man-in-the-middle techniques. Affected IBM TRIRIGA Platform versions include 3.5.0–3.5.3.0, 3.4.0–3.4.2.5, and 3.3.0–3.3.2.5....