CVE-2020-4175

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force...

CVE-2020-4175

Summary: CVE-2020-4175 affects IBM Security Guardium Insights 2.0.1 (and related 2.0 releases). The root cause is failure to properly enable HTTP Strict Transport Security, which could allow a remote attacker to obtain sensitive information via man-in-the-middle techniques. Impact: data disclosur...