CVE-2023-35888

CVE-2023-35888 is a medium-severity information disclosure vulnerability affecting IBM Security Verify Governance 10.0.2. The flaw stems from the product's failure to properly enforce HTTP Strict Transport Security (HSTS), allowing a remote attacker to intercept sensitive information through man-in-the-middle (MITM) attacks. The attack vector is network-based with high attack complexity, but does not require user interaction or privileges. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.