CVE-2019-4697

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938...

CVE-2019-4694

CVE-2019-4694 involves IBM Guardium Data Encryption (GDE) 3.0.0.2, which contains hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. The underlying risk is credential exposure within the product, as described in the CVE record and corrobor...

CVE-2019-4697

Summary (grounded): CVE-2019-4697 affects IBM Guardium Data Encryption (GDE) 3.0.0.2, where user credentials are stored in plaintext and readable by an authenticated user. The vulnerability stems from plaintext storage in GDE 3.0.0.2, enabling credential disclosure. The IBM/IBM X-Force and CNVD/N...

CVE-2019-4692

IBM Security Guardium Data Encryption GDE 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829...

CVE-2019-4693

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831...

CVE-2019-4693

IBM Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plaintext, allowing a locally authenticated privileged user to read them. This is documented across multiple sources (NVD entry CVE-2019-4693 and CNVD-2020-49941), confirming plaintext storage vulnerability in GDE 3.0.0.2. IBM’...

CVE-2019-4688

IBM Security Guardium Data Encryption GDE 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

CVE-2019-4691

IBM Security Guardium Data Encryption GDE 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2019-4688

CVE-2019-4688 affects IBM Guardium Data Encryption (GDE) 3.0.0.2, which does not set the secure attribute on authorization tokens or session cookies. This omission could allow an attacker to obtain cookie values by luring a user to click an http:// link or via a malicious site, enabling cookie sn...

CVE-2019-4689

Summary of CVE-2019-4689 (IBM Guardium Data Encryption, GDE) : GDE 3.0.0.2 stores HTTP Strict Transport Security incorrectly, allowing a remote attacker to obtain sensitive information via man-in-the-middle techniques. The vulnerability is caused by failure to properly enable HSTS, enabling poten...

CVE-2019-4686

IBM Security Guardium Data Encryption GDE 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

CVE-2019-4686

CVE-2019-4686 affects IBM Security Guardium Data Encryption (GDE) 3.0.0.2. The root cause is failure to set the secure attribute on authorization tokens or session cookies, allowing an attacker to obtain cookie values by tricking a user into following an http link or via a link planted on a visit...

CVE-2019-4689: Cleartext Transmission of Sensitive Information

IBM Security Guardium Data Encryption GDE 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

PT-2020-11030

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Security Guardium Data Encryption GDE version...

PT-2020-11028

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local privileged user. Recommendations For IBM Security Guardium Data Encryption...

PT-2020-11031

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue concerns the storage of user credentials in plain text, which can be accessed by an authenticated user. Recommendations For IBM Security Guardium Data Encryption G...

CVE-2019-4713: Undefined Security Weakness

IBM Security Guardium Data Encryption GDE 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084...

PT-2020-11032

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue allows attackers to compromise user accounts more easily due to a lack of strong password requirements by default. Recommendations For version 3.0.0.2, consider...

PT-2020-11023

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue allows attackers to obtain cookie values by sending a http link to a user or by planting this link in a site the user visits. The cookie will be sent to the insecu...

PT-2020-11034

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description The issue concerns active debugging code in the deployment of IBM Security Guardium Data Encryption, which can create unintended entry points. Recommendations For IBM Securi...