TEN-142960

[tlmckinnon94]

How to remediate this on CIMC devices.  The remote HTTPS server does not send the HTTP
"Strict-Transport-Security" header.

[Mark Elsen]

 - For a cisco device you then need to use the latest (advisory) software version for the involved device , if applicable and or upgrade CIMC software too , if available as a separate component.

 - If that does not help contact TAC if that is important for business, M.

[Flavio Miranda]

@tlmckinnon94 

Upgrade to version 4.1(2a) or 4.1(1a)

https://bst.cisco.com/quickview/bug/CSCvs27322

[tlmckinnon94]

Thank you. I'm seeing this vulnerability on version 3.2.

[Mark Elsen]

    - From : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs27322
      >...

           Known Fixed Releases
             4.1(2a)UCSM

             4.1(1a)

  M.