Skip to content
Sign in
5.9 Medium

CVE-2018-1525 IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the…

Description

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142117.

Affected products and versions

Product Affected versions Fixed in
i2 Enterprise Insight Analysis 2.1.7 No fix stated

Other CVEs of i2 Enterprise Insight Analysis

The 3 CVEs of i2 Enterprise Insight Analysis →
CVE-2018-1504 IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim 6.1 Medium CVE-2018-1505 IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on… 4.0 Medium
Track this CVE