CVE-2020-4970
19.05.2022, 16:15
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 192429.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | security_identity_manager | 5.2.4 |
| ibm | security_identity_manager | 5.2.5 |
| ibm | security_identity_manager | 5.2.6 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ibm | security_identity_governance_and_intelligence | 5.2.4 | CNA |
| ibm | security_identity_governance_and_intelligence | 5.2.5 | CNA |
| ibm | security_identity_governance_and_intelligence | 5.2.6 | CNA |
Common Weakness Enumeration