909 matches found
Security Bulletin: IBM Security Guardium is using components with known vulnerabilities (CVE-2022-24614, CVE-2022-24613, CVE-2022-14262)
Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2022-24614 DESCRIPTION: metadata-extractor is vulnerable to a denial of service, caused by an out-of-memory flaw when handling very small inputs. By persuading a victim to open a...
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
Summary IBM Security Guardium has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2022-43909 DESCRIPTION: IBM Security Guardium is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-30435, CVE-2023-30436, CVE-2023-30437)
Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2023-30437 DESCRIPTION: IBM Security Guardium could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. CVSS Base score: 5.3 CVSS Temporal Score:...
Security Bulletin: IBM Security Guardium is affected by a denial of service vulnerability in MIT keb5 (CVE-2022-42898)
Summary IBM Security Guardium has fixed this vulnerability by upgrading the version of MIT krb5 that it uses. Vulnerability Details CVEID:CVE-2022-42898 DESCRIPTION: MIT krb5 is vulnerable to a denial of service, caused by an integer overflow in PAC parsing in the krb5parsepac function. By sendin...
CVE-2022-43903
IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force ID: 240894...
CVE-2022-43903
CVE-2022-43903 affects IBM Security Guardium versions 10.6, 11.3, and 11.4, where an authenticated user could cause a denial of service due to improper input validation. The Red Hat bulletin also references Guardium with the same CVE. Remediation is available via IBM Fix Central/Fixes for the aff...
IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2023-66735)
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security...
Design/Logic Flaw
IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895...
CVE-2022-43904
CVE-2022-43904 affects IBM Security Guardium 11.3 and 11.4 (also 10.6 and 11.5 per IBM bulletin) with an information-disclosure risk due to improper restriction of excessive authentication attempts. The issue can disclose sensitive information to an attacker. IBM’s Security Bulletin notes a base ...
CVE-2023-30436
CVE-2023-30436 affects IBM Security Guardium versions 11.3, 11.4, and 11.5. The connected documents describe a cross-site scripting vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Root cause is no...
CVE-2023-30435 IBM Security Guardium cross-site scripting
IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
IBM Security Guardium 跨站脚本漏洞
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security...
PT-2023-14389 · Ibm · Ibm Security Guardium
Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 11.4 Description: The issue could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. Recommendations: For versions 11.3 and 11.4, conside...
CVE-2023-35893 IBM Security Guardium command execution
IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824...
CVE-2023-35893 IBM Security Guardium command execution
IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824...
CVE-2023-35893
CVE-2023-35893 affects IBM Security Guardium versions 10.6, 11.3, 11.4, and 11.5. The vulnerability allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. The initial sources (IBM X-Force entry) rate the risk as high/critical wit...
IBM Security Guardium License Issue Vulnerability (CNVD-2023-68784)
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security...
IBM Security Guardium Input Validation Error Vulnerability
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...
