CVE-2019-4138

Summary

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 158334.

Affected Software

VendorProductVersion RangeStatus
IBMSpectrum Control Standard Edition5.2.13affected
IBMSpectrum Control Standard Edition5.2.14affected
IBMSpectrum Control Standard Edition5.2.15affected
IBMSpectrum Control Standard Edition5.2.16affected
IBMSpectrum Control Standard Edition5.2.15.2affected
IBMSpectrum Control Standard Edition5.2.17.0affected
IBMSpectrum Control Standard Edition5.2.17.1affected
IBMSpectrum Control Standard Edition5.2.17.2affected
IBMSpectrum Control Standard Edition5.3.0.1affected
IBMSpectrum Control Standard Edition5.3.15.3.2affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References