CVE-2017-1395: IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remot...

Security readout for executives and security teams

This is a transport-security weakness in IBM Security Identity Governance and Intelligence Virtual Appliance. A network-path attacker could intercept user traffic and obtain sensitive information because HSTS was not properly enabled. It is not listed as known exploited, and exploitation requires man-in-the-middle positioning. Exposure is limited to organizations running IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2. Risk is higher where administrators or users access the appliance across untrusted networks, shared networks, or paths where interception is plausible. Treat as a moderate-priority confidentiality risk for identity governance environments. Prioritize remediation for appliances used by administrators, exposed beyond tightly controlled networks, or reachable over networks where interception is credible. Mitigation focus: Review IBM advisory and X-Force ID 127341 for vendor remediation guidance.; Upgrade or patch affected appliance versions according to IBM guidance.; Restrict administrative access to trusted networks or VPN paths..

Prepared

May 25, 2026, 05:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.