CVE-2021-39076

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

CVE-2021-39076

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

Information disclosure

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 21558...

Code injection

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

CVE-2021-39078

IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589...

CVE-2021-39078

CVE-2021-39078 affects IBM Security Guardium 10.5, with credentials stored in plain text accessible to a local privileged user. The IBM Security Guardium remediation/patches cover multiple versions (10.5, 10.6, 11.0, 11.1, 11.2, 11.3, 11.4); apply the fixes via IBM FixCentral as listed (e.g., Sql...

CVE-2021-39076

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

CVE-2021-39076

IBM Security Guardium is affected by CVE-2021-39076 (weaker cryptographic algorithms). The IBM bulletin lists affected versions: Guardium 10.5 and 11.3 (and other variants up to 11.4), with remediation by updating to the fixed bundles shown in IBM’s advisories. The vulnerability could allow an at...

CVE-2021-39072

CVE-2021-39072 affects IBM Security Guardium 11.1–11.4. The root cause is failure to properly enable HTTP Strict Transport Security, allowing remote attackers to potentially de-obfuscate sensitive data via man-in-the-middle. The IBM Security Guardium bulletin confirms the vulnerability and provid...

CVE-2021-39072

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 21558...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from IBM USA that provides data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building.IBM Security Guardium is vulnerable to an information disclosure vulnerability that ste...

PT-2022-10873

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.3 Description The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information using man-in-the-middle techniques. Recommendations...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from IBM USA that provides data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium is vulnerable to an information disclosure vulnerability that...

CVE-2021-39076: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

CVE-2021-39072: Undefined Security Weakness

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 21558...

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building.IBM Security Guardium has a weak encryption algorithm vulnerability that stems from the fact...

CVE-2021-39078: Cleartext Storage of Sensitive Information

IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589...

PT-2022-10877

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.5 Description The issue allows a local privileged user to read user credentials stored in plain clear text. Recommendations For IBM Security Guardium version 10.5, consider restricting access to sensitive areas...

PT-2022-10875

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.5 through 11.3 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt sensitive information. Recommendations For IBM Security...

CVE-2021-39072

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 21558...