CVE-2017-1143 Vulnerability Details

  /     /     /  

CVE-2017-1143 Metadata Quick Info

CVE Published: 27/03/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: ibm | Vendor: IBM Corporation | Product: Kenexa LCMS Premier on Cloud
Status : PUBLISHED

---

CVE-2017-1143 Description

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Obtain Information
Source: IBM Corporation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).