IBMEAB70AE699DB56DD23602130E72663C9EE3626321BFE5EE7D07ACE2B3883BF6B

HistoryJun 22, 2021 - 6:24 p.m.

Security Bulletin: IBM Security Guardium is affected by an Information Exposure vulnerability (CVE-2020-4189)

2021-06-2218:24:13

www.ibm.com

ibm security guardium

information exposure vulnerability

ibm

guardium

information disclosure

fix

10.5

10.6

11.0

11.1

11.2

cve-2020-4189

EPSS

0.001

Percentile

19.6%

JSON

Summary

IBM Security Guardium has fixed this vulnerability

Vulnerability Details

CVEID:CVE-2020-4189
**DESCRIPTION:**IBM Security Guardium discloses sensitive information in the response headers that could be used in further attacks against the system.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174850 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Security Guardium	10.5

IBM Security Guardium| 10.6

IBM Security Guardium| 11.0

IBM Security Guardium| 11.1

IBM Security Guardium| 11.2

Remediation/Fixes

Product	Versions	Fix
IBM Security Guardium	10.5
www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=10.0&platform=All&function=fixId&fixids=SqlGuard_10.0p540_Bundle_Jun-08-2021&includeSupersedes=0&source=fc
IBM Security Guardium	10.6
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=10.0&platform=All&function=fixId&fixids=SqlGuard_10.0p665_Bundle_Apr-07-2021&includeSupersedes=0&source=fc
IBM Security Guardium	11.0
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=All&function=fixId&fixids=SqlGuard_11.0p35_Bundle_Mar-30-2021&includeSupersedes=0&source=fc
IBM Security Guardium	11.1
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=All&function=fixId&fixids=SqlGuard_11.0p130_Bundle_Feb-19-2021&includeSupersedes=0&source=fc
IBM Security Guardium	11.2
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=All&function=fixId&fixids=SqlGuard_11.0p225_Bundle_Dec-30-2020&includeSupersedes=0&source=fc

Workarounds and Mitigations

None