CVE-2016-6027

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection…

published October 6, 2016

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information or modify data by leveraging use of HTTP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00808 · 56.2th percentile
Published
2016-10-06T10:00Z
EPSS history
Timeline
  • 06 OCT 10:00Z
    The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection…
    cvelistv5