Threats tagged 'ghsa-23v6-7r6w-c9x5'

IBM Concert versions 1.0.0 through 2.0.0 have a vulnerability due to the failure to properly enable HTTP Strict-Transport-Security (HSTS). This flaw could allow a remote attacker to intercept communications and obtain sensitive information via man-in-the-middle attacks. The vulnerability has a medium severity score of 5.9 and does not affect availability or integrity, only confidentiality.