2502 matches found
Security Bulletin: IBM Security Guardium is affected by OpenSource GNU glibc Vulnerability (CVE-2015-8776 CVE-2015-5229)
Summary GNU C Library glibc is vulnerable to a denial of service. IBM Security Guardium has provided a fix for this issue Vulnerability Details CVEID: CVE-2015-8776 DESCRIPTION: GNU C Library glibc is vulnerable to a denial of service. By passing out-of-range time values to the strftime function,...
Security Bulletin: IBM Security Guardium is affected by Open Source XMLsoft Libxml2 Vulnerabilities (CVE-2016-4447 CVE-2016-4448 CVE-2016-4449)
Summary Open Source XMLsoft Libxml2 Vulnerabilities affects IBM Security Guardium. IBM Security Guardium has fixed these vulnerabilites Vulnerability Details CVEID: CVE-2016-4447 DESCRIPTION: libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow. By persuading a...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Guardium
Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Guardium. IBM Security Guardium has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by...
Security Bulletin: OpenSource Oracle MySQL Vulnerability affects IBM Security Guardium (CVE-2016-2047)
Summary Oracle MySQL, MariaDB and Percona Server could allow a remote attacker to bypass security restrictions. IBM Security Guardium has addressed the applicable CVE Vulnerability Details CVEID: CVE-2016-2047 DESCRIPTION: Oracle MySQL, MariaDB and Percona Server could allow a remote attacker to...
Security Bulletin: : Multiple Vulnerabilities in OpenSSL affect IBM Security Guardium
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Guardium . IBM Security Guardium has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitra...
Security Bulletin: : Vulnerabilities in OpenSSL affect IBM Security Guardium (CVE-2015-3197)
Summary OpenSSL vulnerabilities were disclosed on January 28, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Guardium. IBM Security Guardium has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3197 DESCRIPTION: OpenSSL could allow a remote attacker to conduct...
Security Bulletin: Vulnerabilities in OpenSource libxml2 affect IBM Security Guardium (CVE-2016-2073)
Summary libxml2 is vulnerable to a heap-based buffer overflow. IBM Security Guardium has addressed the applicable CVE Vulnerability Details CVEID: CVE-2016-2073 DESCRIPTION: libxml2 is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds read in the htmlParseNameComplex function...
Security Bulletin: InstallShield and InstallAnywhere vulnerabilities affect IBM Security Guardium Data Redaction (CVE-2016-2542)
Summary Flexera InstallShield could allow a local attacker to gain elevated privileges on the system, caused by an untrusted search path. An attacker could exploit this vulnerability using a Trojan horse DLL in the current working directory of a setup-launcher executable file to gain elevated...
Security Bulletin: Query Parameter in SSL Request vulnerability affects IBM Security Guardium (CVE-2016-0248)
Summary IBM Security Guardium transmits query parameters in SSL requests, that could be intercepted by a remote attacker using man in the middle techniques Vulnerability Details CVEID: CVE-2016-0248 DESCRIPTION: IBM Security Guardium transmits query parameters in SSL requests, that could be...
Security Bulletin: Path Traversal affects IBM Security Guardium Database Activity Monitor (CVE-2016-0298)
Summary IBM Security Guardium Database Activity Monitor could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to view arbitrary files on the system. Vulnerability Details CVEID: CVE-2016-0298 DESCRIPTION: IBM Security Guardium...
Security Bulletin: Use of Hard-coded Cryptographic Key vulenrability affects IBM Security Guardium Database Activity Monitor (CVE-2016-0235)
Summary IBM Security Guardium Database Activity Monitor uses a hard-coded password for the which is available to the administrator or a user with root access. This password could be used across other GRUB systems. Vulnerability Details CVEID: CVE-2016-0235 DESCRIPTION: IBM Security Guardium...
Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)
Summary IBM Security Guardium is vulnerable to several possible remote attacks Vulnerability Details CVEID: CVE-2015-4881 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the CORBA component has complete confidentiality impact, complete integrity impact, and complete...
Security Bulletin: Cacheable SSL Page vulnerability affects IBM Security Guardium Database Activity Monitor (CVE-2016-0237)
Summary IBM Security Guardium Database Activity Monitor contains locally cached browser data, that could allow a local attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2016-0237 DESCRIPTION: IBM Security Guardium Database Activity Monitor contains locally cached browser...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Guardium
Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Guardium. IBM Security Guardium has addressed the applicable CVEs including the “DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. Vulnerability Detail...
Security Bulletin: IBM Security Guardium is affected by OpenSource Oracle MySQL Vulnerability (multiple CVEs)
Summary IBM Security Guardium is affected by unspecified vulnerabilities in Oracle MySQL Server Vulnerability Details CVEID: CVE-2016-0503 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the "Server: DML" component could allow a remote attacker to cause a denial of...
Security Bulletin: : Vulnerabilities in OpenSSL affect IBM Security Guardium (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)
Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM Security Guardium. IBM Security Guardium has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3194 DESCRIPTION: OpenSSL is vulnerable to a denial of service, cause...
Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by OpenSource LibXML2 and LibXML Vulnerability (CVE-2015-7942 CVE-2015-8241 CVE-2015-8242)
Summary libxml2 is vulnerable to a stack-based buffer overflow, denial of service and a buffer overflow Vulnerability Details CVEID: CVE-2015-8242 DESCRIPTION: libxml2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the HTML parser in push mode in...
Security Bulletin: IBM Security Guardium is affected by the OpenSource libxml2 vulnerability
Summary Libxml2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the xmlParseXMLDecl function. By using a malformed XML file, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. Vulnerability...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Guardium Data Redaction (CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version1.6 that is used by IBM InfoSphere Guardium Data Redaction. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as “SLOTH”...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium (CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 6 and 7 that is used by IBM Security Guardium. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as “SLOTH”. Vulnerability...