CVE-2020-4970

CVE-2020-4970 is a sensitive information disclosure vulnerability affecting IBM Security Identity Governance and Intelligence versions 5.2.4, 5.2.5, and 5.2.6. The flaw stems from the failure to properly enable HTTP Strict Transport Security (HSTS), allowing a remote attacker to potentially intercept sensitive data. Rated as medium severity (CVSS 5.9), an attacker could exploit this with high attack complexity using man-in-the-middle techniques, leading to a high impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability.