CVE-2019-4162

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header

Medium · published June 6, 2019

CVSS v3.0
5.9
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. IBM X-Force ID: 158661.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/I:N/PR:N/AC:H/AV:N/S:U/UI:N/A:N/C:H/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00595 · 47.7th percentile
Published
2019-06-06T20:45Z
EPSS history
Timeline
  • 06 JUN 20:45Z
    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header
    cvelistv5