CVE-2024-49820

Description

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Reserved 2024-10-20 | Published 2024-12-17 | Updated 2024-12-17 | Assigner ibm

Problem types

CWE-319 Cleartext Transmission of Sensitive Information

Product status

Default status
unaffected

4.1, 4.1.1, 4.2.0, 4.2.1
affected

References

www.ibm.com/support/pages/node/7175067 vendor-advisory

cve.org (CVE-2024-49820)

nvd.nist.gov (CVE-2024-49820)

Download JSON