Code injection

IBM Security Guardium Big Data Intelligence SonarG 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769...

CVE-2018-1375

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776...

CVE-2018-1369

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767...

Cross site scripting

IBM Security Guardium Big Data Intelligence SonarG 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

CVE-2018-1370

IBM Security Guardium Big Data Intelligence SonarG 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769...

CVE-2018-1376

IBM Security Guardium Big Data Intelligence SonarG 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

CVE-2018-1375

CVE-2018-1375 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The issue is that a session variable is not renewed after successful authentication, which could enable session fixation/hijacking by forcing a user to use a cookie potentially known to an attacker (IBM X-Force ID: 13...

CVE-2018-1370

CVE-2018-1370 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The flaw is an incorrect permission assignment for a security-critical resource, allowing read/modify by unintended actors. The IBM bulletin lists a CVSS v3 base score of 4.2 and notes remediation is to upgrade to an ...

CVE-2018-1369

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 contains a vulnerability where sensitive information is stored in URL parameters, enabling potential information disclosure via server logs, referrer headers, or browser history. The issue affects SonarG 3.1 and is documented as CVE-2018-13...

CVE-2018-1370

IBM Security Guardium Big Data Intelligence SonarG 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769...

How to Tune Your Database Security to Protect Big Data

As digital information and data continues to accumulate worldwide, new big data solutions grow more and more popular. The introduction of IoT into our lifestyle, which turns appliances into smart data logging machines, along with organizations tracking behaviors for data science and research...

siwel-big-data.com XSS vulnerability

Open Bug Bounty ID: OBB-586693 Description| Value ---|--- Affected Website:| siwel-big-data.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

A Star Wars Analogy to Defend Against Non-Malware Attacks and the Dark Side

I like watching movies because I can relate almost anything in my real life to the movies I watched. Last week, I did a presentation at "Security Days Tokyo 2018," and I used Star Wars to describe the targeted attacks, non-malware attacks, AI-based, NGAV, etc. The Star Wars analogies were well...

IBM Security Guardium Big Data Intelligence Information Disclosure Vulnerability (CNVD-2018-06604)

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...

CVE-2018-1373

IBM Security Guardium Big Data Intelligence SonarG 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 137773...

Code injection

IBM Security Guardium Big Data Intelligence SonarG 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 137773...

CVE-2018-1373

IBM Security Guardium Big Data Intelligence SonarG 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 137773...

IBM Security Guardium Big Data Intelligence Weak Password Policy Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...

IBM Security Guardium Big Data Intelligence Information Disclosure Vulnerability

IBM Security Guardium Big Data Intelligence is a solution that delivers the capabilities of a big data platform while meeting data security requirements. An information disclosure vulnerability exists in IBM Security Guardium Big Data Intelligence SonarG 3.1. The vulnerability arises because the...

CVE-2018-1372

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772...