CVE-2022-33161

CVE-2022-33161 is a medium-severity information disclosure vulnerability affecting IBM Security Directory Server, Integrator, Suite, and Verify Directory. It stems from the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information via man-in-the-middle techniques. The CVSS score is 5.9, indicating a network-based attack with high confidentiality impact but high attack complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.