CVE-2019-4162

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. IBM X-Force ID: 158661.

• CWE-319

• https://exchange.xforce.ibmcloud.com/vulnerabilities/158661VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10885963Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158661VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10885963Patch, Vendor Advisory

Published

Jun 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-4156IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker …5.9
• CVE-2019-4157IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerabl…6.1
• CVE-2019-4158IBM Security Access Manager 9.0.1 through 9.0.6 does not pro…5.4
• CVE-2019-4159Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-4160IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses wea…7.5
• CVE-2019-4161IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.…3.3
• CVE-2019-4163IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authent…4.3
• CVE-2019-4165IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote a…7.5
• CVE-2019-4166IBM StoredIQ 7.6 could allow a remote attacker to conduct ph…6.1
• CVE-2019-4167IBM StoredIQ 7.6.0 is vulnerable to cross-site request forge…6.5
• CVE-2019-4169IBM Open Power Firmware OP910 and OP920 could allow access t…9.1
• CVE-2019-4171IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 doe…3.7