IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2018-12-07T16:00:00Z

Updated: 2024-09-17T01:41:02.926Z

Reserved: 2017-12-13T00:00:00

Link: CVE-2018-1663

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-12-07T16:29:00.413

Modified: 2019-10-09T23:38:50.320

Link: CVE-2018-1663

cve-icon Redhat

No data.