未評価
IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Stri...
CVE-2024-41757
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
参照URL
- advisory ibm.com