5.9
Medium
CVE-2019-4138 IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive…
Description
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 158334.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Control Standard Edition 5.3 | 5.3.0.1 → 5.3.15.3.2 | No fix stated |
| Spectrum Control Standard Edition 5.2 | 5.2.13 → 5.2.17.2 | No fix stated |
Other CVEs of Spectrum Control Standard Edition
The 4 CVEs of Spectrum Control Standard Edition →
CVE-2019-4137
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting
6.1
Medium
CVE-2019-4071
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote…
6.8
Medium
CVE-2019-4072
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to…
4.7
Medium