CVE-2019-4138

Опубликовано: 29 мая 2019

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 158334.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10880375
Patch
Vendor Advisory
http://www.securityfocus.com/bid/108533
https://exchange.xforce.ibmcloud.com/vulnerabilities/158334
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10880375
Patch
Vendor Advisory
http://www.securityfocus.com/bid/108533
https://exchange.xforce.ibmcloud.com/vulnerabilities/158334
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_control:*:*:*:*:*:*:*:*

Версия от 5.2.13.0 (включая) до 5.2.17.2 (включая)

cpe:2.3:a:ibm:spectrum_control:*:*:*:*:*:*:*:*

Версия от 5.3.0.0 (включая) до 5.3.2.0 (включая)

EPSS

Процентиль: 52%

0.00286

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-q9qq-hhhc-3c8x