CVE-2024-39746

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect:Direct Web Services versions 6.0 through 6.3

Description The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information using man-in-the-middle techniques. This could lead to the cleartext transmission of sensitive data.

Recommendations For versions 6.0 through 6.3, upgrade to a version that properly enables HTTP Strict Transport Security to mitigate the risk of data exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.