CVE-2020-4841

CVE-2020-4841 describes a sensitive information disclosure vulnerability in IBM Security Secret Server 10.6, affecting both IBM and Microsoft Windows deployments. The flaw stems from the failure to properly enable HTTP Strict Transport Security (HSTS), allowing a remote attacker to intercept sensitive data via man-in-the-middle attacks. With a CVSS score of 5.9 (Medium), this vulnerability has a network attack vector and high confidentiality impact, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.