CVE-2019-4162

HIGH

IBM Security Information Queue 1.0.0-1.0.2 - Cleartext Transmission of Sensitive Information

Title source: llm

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. IBM X-Force ID: 158661.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/docview.wss?uid=ibm10885963

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/158661

Scores

CVSS v3 7.5

EPSS 0.0060

EPSS Percentile 43.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-319

Status published

Products (3)

ibm/security_information_queue 1.0.0

ibm/security_information_queue 1.0.1

ibm/security_information_queue 1.0.2

Published Jun 06, 2019

Tracked Since Feb 18, 2026