CoreCVE
Back

MEDIUM

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security

Published Apr 15, 2020

Description

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID: 167810.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ibm
Published Apr 15, 2020
Updated Sep 17, 2024
Reserved Jan 3, 2019
Link CVE-2019-4594
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-4594
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-4594