Lack of HSTS Protection in IBM BigFix Remote Control before 9.1.3

CVE-2016-2952

IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.

Learn more about our Web Application Penetration Testing UK.