5.9
Moyenne
CVE-2019-4162 IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header
Description
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. IBM X-Force ID: 158661.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Information Queue 1.0 | 1.0.0 → 1.0.2 | Pas de correctif indiqué |
Autres CVE de Security Information Queue
Les 13 CVE de Security Information Queue →
CVE-2020-4291
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive…
4.7
Moyenne
CVE-2020-4290
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to…
4.2
Moyenne
CVE-2020-4284
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive…
5.3
Moyenne
CVE-2020-4289
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to…
5.3
Moyenne