CVE-2024-49820

Summary

CVE-2024-49820 is a vulnerability affecting IBM Security Guardium Key Lifecycle Manager versions 4.1, 4.1.1, 4.2.0, and 4.2.1. This issue stems from the inadequate enforcement of HTTP Strict Transport Security. An attacker, positioned as a man in the middle, can exploit this vulnerability and gain unauthorized access to sensitive information. Failure to properly implement HTTPS security measures leaves the system vulnerable to interception and data theft. IBM urges users to update their software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.