Unrated severityNVD Advisory· Published May 19, 2022· Updated Sep 17, 2024
CVE-2020-4970
CVE-2020-4970
Description
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 192429.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=5.2.6+ 1 more
- (no CPE)range: <=5.2.6
- (no CPE)range: 5.2.4
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/192429mitrevdb-entryx_refsource_XF
- www.ibm.com/support/pages/node/6587435mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.