description: Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.
problem types: CWE-665
affected:
{
vendor: n/a
product: OpenShift
versions:
version: 4.9.0, status: affected
}