漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
HCL IEM was affected with X-Content-Type-Options Header Missing
Vulnerability Description
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
配置
Vulnerability Title
HCLSoftware IntelliOps Event Management 配置错误漏洞
Vulnerability Description
HCL IntelliOps Event Management是印度HCL公司的一款事件管理软件。 HCLSoftware IntelliOps Event Management 1.1版本存在配置错误漏洞,该漏洞源于缺少X-Content-Type-Options标头,可能导致攻击者执行SSL剥离或中间人攻击并拦截敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A