Missing HTTP Strict-Transport-Security Header in HCL AppScan Enterprise Web Application Console

Missing HTTP Strict-Transport-Security Header in HCL AppScan Enterprise Web Application Console

CVE-2019-4326 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."

Learn more about our Web App Pen Testing.