CVE-2024-49797: IBM ApplinX Information Disclosure
IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Other sources
IBM ApplinX could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49797?
The severity of CVE-2024-49797 is classified as high due to the potential exposure of sensitive information.
How do I fix CVE-2024-49797?
To fix CVE-2024-49797, you need to apply the relevant patch from IBM for ApplinX version 11.1.
What causes CVE-2024-49797?
CVE-2024-49797 is caused by the failure to properly enable HTTP Strict Transport Security in IBM ApplinX 11.1.
Can CVE-2024-49797 lead to data breaches?
Yes, CVE-2024-49797 can lead to data breaches if exploited using man-in-the-middle techniques.
Is IBM ApplinX 11.1 the only affected version for CVE-2024-49797?
Yes, CVE-2024-49797 specifically affects IBM ApplinX version 11.1.