CVE-2023-50962

IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy mechanism. IBM X-Force ID: 276004.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2024-02-02

Last modified

2024-08-22

Weaknesses

CWE-319

Affected products

• Powersc (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/276004
• https://www.ibm.com/support/pages/node/7113759