VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026

CVE-2017-1143

CVE-2017-1143

Description

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • IBM/Kenexa Lcms Premier10 versions
    cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:10.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:kenexa_lcms_premier:9.5:*:*:*:*:*:*:*
    • (no CPE)range: 9.x and 10.0
  • IBM Corporation/Kenexa LCMS Premier on Cloudv5
    Range: 9.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.