Back to feed
EUVD-2021-16166 · Published May 20, 2021
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 200253.
Technologies
Oracle SolarisIbm AixLinux Linux KernelIbm Security Identity ManagerMicrosoft Windows
CVSS scores
- v3.15.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - v2.04.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
