IBM Security Guardium Information Disclosure Vulnerability (CNVD-2023-66732)

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An information disclosure vulnerability exists in IBM Security Guardium versions 11.3, 11.4, and 11.5, which can be exploited by an unauthorized attacker to enumerate usernames by sending a specially crafted HTTP request.