Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBME21D552E4549005B12C0D0489CC037E8BFCB09C3262562C8935E120E5D7AA7A7
HistorySep 22, 2023 - 8:43 p.m.

Security Bulletin: IBM Security Guardium has a missing or insecure SameSite attribute for a sensitive cookie (CVE-2022-43906)

2023-09-2220:43:00
www.ibm.com
12
ibm security guardium
missing samesite attribute
sensitive cookie
update
vulnerability disclosure

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

13.3%

JSON

Summary

IBM Security Guardium has addressed this vulnerability with an update.

Vulnerability Details

CVEID:CVE-2022-43906
**DESCRIPTION:**IBM Security Guardium could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
CVSS Base score: 3.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/240897 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Security Guardium 11.5

Remediation/Fixes

IBM encourages customers to update their systems promptly.

Product Versions ** Fix**
IBM Security Guardium 11.5 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=Linux&function=fixId&fixids=SqlGuard_11.0p530_Bundle_Aug-29-2023&includeSupersedes=0&source=fc

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmsecurity_guardiumMatch11.5
CPENameOperatorVersion
ibm security guardiumeq11.5

Related

prion 1
cve 1
cvelist 1
nvd 1
prion
prion
Information disclosure
2023-10-04 14:15:00
cve
cve
CVE-2022-43906
2023-10-04 14:15:10
cvelist
cvelist
CVE-2022-43906 IBM Security Guardium information disclosure
2023-10-04 13:50:52
nvd
nvd
CVE-2022-43906
2023-10-04 14:15:10

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

13.3%

JSON
Related for E21D552E4549005B12C0D0489CC037E8BFCB09C3262562C8935E120E5D7AA7A7
prion1cve1cvelist1nvd1