CVE-2024-49797: IBM ApplinX Information Disclosure
First published: Wed Feb 05 2025(Updated: )
IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM ApplinX | <=11.1 | |
| =11.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-49797?
The severity of CVE-2024-49797 is classified as high due to the potential exposure of sensitive information.
How do I fix CVE-2024-49797?
To fix CVE-2024-49797, you need to apply the relevant patch from IBM for ApplinX version 11.1.
What causes CVE-2024-49797?
CVE-2024-49797 is caused by the failure to properly enable HTTP Strict Transport Security in IBM ApplinX 11.1.
Can CVE-2024-49797 lead to data breaches?
Yes, CVE-2024-49797 can lead to data breaches if exploited using man-in-the-middle techniques.
Is IBM ApplinX 11.1 the only affected version for CVE-2024-49797?
Yes, CVE-2024-49797 specifically affects IBM ApplinX version 11.1.
- agent/references
- agent/type
- agent/first-publish-date
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/description
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- agent/source
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/ibm
- canonical/ibm applinx
- version/ibm applinx/11.1