IBM Security Guardium Key Lifecycle Manager information disclosure

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

敏感数据的明文传输

IBM Security Guardium Key Lifecycle Manager 安全漏洞

IBM Security Guardium Key Lifecycle Manager是国际商业机器（IBM）公司的一种加密密钥管理工具。可集中、简化和自动化密钥管理流程。 IBM Security Guardium Key Lifecycle Manager存在安全漏洞，该漏洞源于未能正确启用 HTTP 严格传输。攻击者利用该漏洞可以获取敏感信息。以下版本受到影响：4.1版本、4.1.1版本、4.2.0版本和4.2.1版本。

N/A

N/A