CVE-2021-20428

CVE-2021-20428 — Information disclosure in IBM Security Guardium 11.2 Affected product: IBM Security Guardium 11.2 (and related Guardium lines listed in the CVE record). Summary from provided sources: A remote attacker could obtain sensitive information by triggering a detailed technical error me...

CVE-2021-20428

IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315...

CVE-2021-20426

IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313...

CVE-2021-20426

CVE-2021-20426 affects IBM Security Guardium 11.2 and involves hard-coded credentials (passwords/cryptographic keys) used for inbound authentication, outbound communication, or data encryption. The root cause is the presence of hard-coded credentials within the product, which could enable unautho...

CVE-2021-20389

IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770...

CVE-2021-20419

CVE-2021-20419 affects IBM Security Guardium 11.2. The described issue is weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information (CVE-2021-20419; IBM X-Force ID 196280). Affected products/versions include Guardium 11.2; IBM lists multipl...

CVE-2021-20419

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...

CVE-2021-20389

CVE-2021-20389 affects IBM Security Guardium 11.2, where user credentials are stored in plaintext on disk and readable by a local user. Root cause: credentials are stored in clear text, enabling local access to sensitive data. Impact: potential disclosure of credentials to anyone with local acces...

CVE-2021-20386

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767...

CVE-2021-20386

CVE-2021-20386 affects IBM Security Guardium 11.2 Web UI and is described as a cross-site scripting vulnerability that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The provided documents substantiate the issue and i...

CVE-2021-20385

CVE-2021-20385 affects IBM Security Guardium 11.2, where a remote authenticated attacker could execute arbitrary commands via a specially crafted request. The primary sources confirm the vulnerability in Guardium and assign an IBM X-Force ID 195766, with a high impact indication in the CVSS metri...

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

CVE-2021-20385

IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 195766...

CVE-2020-4990

CVE-2020-4990 affects IBM Security Guardium 11.2 (and 11.3). The vulnerability is an SQL injection in Guardium, allowing a remote attacker to view, add, modify, or delete data in the back-end database. The IBM bulletin states that Guardium has fixed this vulnerability, listing affected versions (...

IBM Security Guardium Weak Encryption Algorithm Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A weak cryptographic algorithm vulnerability exists in IBM Security...

IBM Security Guardium Access Control Error Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from an Access Control Error vulnerabili...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2021-37192)

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. An information disclosure vulnerability exists in IBM Security Guardium version 11.2. An attacker could exploit this vulnerabilit...

CVE-2021-20428

IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315...

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A weak cryptographic algorithm vulnerability exists in IBM Security...

IBM Security Guardium SQL注入漏洞

IBM Security Guardium is a product of IBM IBM in the U.S. etc. IBM Security Guardium is a suite of platforms that provide data protection capabilities. github rd is a software application. github ic etc. are open source products. github ic is a software application. IBM Security Guardium suffers...