IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2018-12-07T16:00:00Z
Updated: 2024-09-17T01:41:02.926Z
Reserved: 2017-12-13T00:00:00
Link: CVE-2018-1663
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-12-07T16:29:00.413
Modified: 2019-10-09T23:38:50.320
Link: CVE-2018-1663
Redhat
No data.