Security Bulletin: IBM Security Guardium is affected by an Information Exposure vulnerability

2021-09-1420:18:49

www.ibm.com

ibm security guardium

information exposure

vulnerability

fixed

EPSS

0.001

Percentile

23.7%

JSON

Summary

IBM Security Guardium has fixed this vulnerability

Vulnerability Details

CVEID:CVE-2021-20433
**DESCRIPTION:**IBM Security Guardium could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/196345 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Security Guardium	11.3

Remediation/Fixes

Product	Versions	Fix
IBM Security Guardium	11.3
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=Linux&function=fixId&fixids=SqlGuard_11.0p325_Bundle_Aug-26-2021&includeSupersedes=0&source=fc

Workarounds and Mitigations

None

EPSS

0.001

Percentile

23.7%

JSON

Related for C008CC9F995FEAF39076C8C904A8AA07A33657E104594514654D8C5BB12FCFF3