CVE-2020-4952

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

CVE-2020-4189

IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850...

CVE-2020-4189

IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850...

Improper access control

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

Design/Logic Flaw

IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850...

CVE-2020-4952

CVE-2020-4952 affects IBM Security Guardium 11.2 (also 11.1/11.3 per IBM bulletin). An authenticated user can gain root access due to improper access control (privilege escalation). Base score 8.8 (CVSS3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation: fixes available for 11.1, 11.2, and 11.3...

CVE-2020-4952

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

CVE-2020-4189

IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850...

CVE-2020-4189

CVE-2020-4189 affects IBM Security Guardium: the vulnerability enables information disclosure via sensitive data in response headers. Affected products/versions cited in the IBM Security Guardium bulletin include 10.5, 10.6, 11.0, 11.1, and 11.2. The root cause is information exposure in header r...

CVE-2020-4189: Cleartext Storage of Sensitive Information

IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850...

PT-2021-12121

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.2 Description: The issue discloses sensitive information in the response headers, which could be used in further attacks against the system. Recommendations: For IBM Security Guardium version 11.2, consider...

PT-2021-12249

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.2 Description The issue allows an authenticated user to gain root access due to improper access control. Recommendations For IBM Security Guardium version 11.2, update to a version that includes the fix for thi...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. An improper access control vulnerability exists in IBM Security Guardium 11.2. An attacker could exploit the vulnerability to gai...

CVE-2020-4952: Undefined Security Weakness

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. An information disclosure vulnerability exists in IBM Security Guardium 11.2. An attacker could exploit this vulnerability to...

CVE-2020-4952

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

IBM Security Guardium SQL Injection Vulnerability (CNVD-2021-05465)

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. An SQL injection vulnerability exists in IBM Security Guardium 10.6, 11.2. An attacker can exploit this vulnerability by sending...

IBM Security Guardium Command Injection Vulnerability

IBM Security Guardium is a comprehensive data protection solution that provides comprehensive data security capabilities from compliance support to dynamic data shielding. A command injection vulnerability exists in IBM Security Guardium 10.6, 11.2. A local attacker could exploit this vulnerabili...

CVE-2020-4688

IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700...

CVE-2020-4921

IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191398...