PT-2020-10941
CVE-2019-4326
·
Published
2020-10-06
·
Updated
2020-10-19
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HCL AppScan Enterprise (affected versions not specified)
Description
The issue concerns the administration section of the web application console in HCL AppScan Enterprise, which is missing the HTTP Strict-Transport-Security Header. This omission could potentially allow for certain types of attacks.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾