CVE-2020-4160

Name of the Vulnerable Software and Affected Versions: IBM QRadar Network Security versions 5.4.0 through 5.5.0

Description: The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information using man-in-the-middle techniques.

Recommendations: For versions 5.4.0 and 5.5.0, enable HTTP Strict Transport Security to prevent exploitation. As a temporary workaround, consider restricting access to sensitive information until a proper fix is applied.