Lucene search
+L

3509 matches found

Positive Technologies
Positive Technologies
•added 2023/07/19 12:00 a.m.•50 views

PT-2023-14392 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.3 Description: The issue is due to improper input validation, which could allow an authenticated user to cause a denial of service. Recommendations: For IBM Security Guardium version 11.3, at the moment, there...

6.5CVSS6.2AI score0.00712EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/19 12:00 a.m.•2 views

CVE-2022-43910: Improper Preservation of Permissions

IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls. IBM X-Force ID: 240908...

8.4CVSS7.4AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/19 12:00 a.m.•25 views

PT-2023-14395 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.3 Description: The issue allows a local user to escalate their privileges due to improper permission controls. Recommendations: For IBM Security Guardium version 11.3, consider restricting access to sensitive...

8.4CVSS7.8AI score0.00168EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/19 12:00 a.m.•4 views

CVE-2022-43908: Improper Input Validation

IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903...

6.5CVSS6.6AI score0.00712EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/19 12:00 a.m.•24 views

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security...

8.4CVSS6.7AI score0.00168EPSS
SaveExploits0References3
CNVD
CNVD
•added 2023/06/21 12:00 a.m.•21 views

IBM Security Guardium License Issue Vulnerability (CNVD-2023-51459)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has an authorization issue...

7.8CVSS6.5AI score0.00157EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/15 1:15 a.m.•17 views

CVE-2022-22307

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

7.8CVSS5.8AI score0.00157EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/15 1:15 a.m.•34 views

CVE-2022-22307

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

7.8CVSS5.7AI score0.00157EPSS
SaveExploits0References2
Prion
Prion
•added 2023/06/15 1:15 a.m.•29 views

Authorization

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

4.3CVSS7.7AI score0.00157EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/06/15 12:35 a.m.•113 views

CVE-2022-22307

IBM Security Guardium 11.3–11.5 are affected by CVE-2022-22307, allowing a local user to escalate privileges due to incorrect authorization checks. The IBM Security Guardium bulletin lists the remediation: upgrade to fixed bundles for 11.3, 11.4, or 11.5 (fix IDs provided in the IBM bulletin). No...

7.8CVSS5.2AI score0.00157EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/06/15 12:35 a.m.•47 views

CVE-2022-22307 IBM Security Guardium privilege escalation

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

4.4CVSS7.3AI score0.00157EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/06/15 12:35 a.m.•23 views

CVE-2022-22307 IBM Security Guardium privilege escalation

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

4.4CVSS6.2AI score0.00157EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/15 12:00 a.m.•1 views

CVE-2022-22307: Incorrect Authorization

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753...

7.8CVSS7.3AI score0.00157EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•23 views

PT-2023-12683 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 11.5 Description: The issue allows a local user to obtain elevated privileges due to incorrect authorization checks. Recommendations: For versions 11.3 through 11.5, update to a version that include...

7.8CVSS7.3AI score0.00157EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/06/15 12:00 a.m.•18 views

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has an authorization issue...

7.8CVSS6.7AI score0.00157EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2023/06/13 6:26 p.m.•70 views

Security Bulletin: IBM Security Guardium is affected by FasterXML jackson-databind vulnerabilities (CVE-2020-25649, X-Force ID 217968)

Summary IBM Security Guardium has fixed these vulnerabilities. Vulnerability Details CVEID:CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected security, caused by not having entity expansion secured properly. A remote attacker could exploit this vulnerability...

7.5CVSS7.8AI score0.1726EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/06/05 1:15 a.m.•14 views

CVE-2023-0041

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657...

8.8CVSS7.3AI score0.00455EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/05 1:15 a.m.•34 views

CVE-2023-0041

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657...

8.8CVSS7.1AI score0.00455EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/06/05 12:53 a.m.•47 views

CVE-2023-0041 IBM Security Guardium session fixation

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657...

6.3CVSS8.2AI score0.00455EPSS
SaveExploits0References2
CVE
CVE
•added 2023/06/05 12:53 a.m.•95 views

CVE-2023-0041

IBM Security Guardium 11.5 is affected by CVE-2023-0041, where insufficient session expiration could allow a user to take over another user’s session. Connected sources also indicate Guardium 11.3/11.4/11.5 were affected; remediation is available via IBM FixCentral (links shown in sources), thoug...

8.8CVSS7.1AI score0.00455EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder