VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 27, 2017· Updated May 13, 2026

CVE-2017-1143

CVE-2017-1143

Description

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.

Affected products

10
  • IBM/Kenexa Lcms Premier9 versions
    cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.5:*:*:*:*:*:*:*
  • IBM Corporation/Kenexa LCMS Premier on Cloudv5
    Range: 9.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.