CVE-2019-4138

Published: May 29, 2019Modified: Jun 17, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 158334.

Affected (2)

Products: Ibm: Spectrum Control

1 product

Spectrum Control

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Control	From 5.2.13.0 to 5.2.17.2
Ibm Spectrum Control	From 5.3.0.0 to 5.3.2.0

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (6)

http://www.ibm.com/support/docview.wss?uid=ibm10880375

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/108533

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/158334

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=ibm10880375

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/108533

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/158334

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.