Security Bulletin: IBM Security Guardium is affected by a Missing Security Control vulnerability

2021-10-0612:37:14

www.ibm.com

ibm security guardium

missing security control

vulnerability

version 11.2

EPSS

0.001

Percentile

43.9%

JSON

Summary

IBM Security Guardium has fixed this vulnerability

Vulnerability Details

CVEID:CVE-2018-1501
**DESCRIPTION:**IBM Security Guardium EcoSystem could allow an unauthorized user to obtain sensitive information due to missing security controls.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/141226 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Security Guardium	11.0

Remediation/Fixes

Product	Versions	Fix
IBM Security Guardium	11.2	http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=All&function=fixId&fixids=SqlGuard_11.0p200_GPU_May-2020-V11.2&includeSupersedes=0&source=fc

Workarounds and Mitigations

None

EPSS

0.001

Percentile

43.9%

JSON

Related for 7A88655093AF759B5DB43D41FA7D615516644BCE37D911E8E957CF048177F0C3