CVE-2017-1143

5.3 mediumEPSS 0.9%

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:kenexa_lcms_premier

References

http://www.ibm.com/support/docview.wss?uid=swg21998874
http://www.securityfocus.com/bid/97079
http://www.ibm.com/support/docview.wss?uid=swg21998874
http://www.securityfocus.com/bid/97079

Check your stack JSON