CVE-2020-4969

CVE-2020-4969 describes a sensitive information disclosure vulnerability in IBM Security Identity Governance and Intelligence 5.2.6. The flaw stems from the product's failure to properly enforce HTTP Strict Transport Security (HSTS), allowing a remote attacker to potentially intercept sensitive data via man-in-the-middle attacks. With a CVSS score of 5.9 (Medium), this vulnerability requires high attack complexity but could lead to high confidentiality impact without user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.