3485 matches found
PT-2020-17905
Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.1 Description The issue could disclose sensitive information on the login page, potentially aiding in further attacks against the system. Recommendations For IBM Security Guardium version 11.1, consider...
PT-2020-17901
Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session...
PT-2020-17907
Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.6 through 11.1 Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of...
PT-2020-17900
Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.1 Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially-crafted request. This enables the attacker to exploit the system and execute...
CVE-2020-4307: Undefined Security Weakness
IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...
PT-2020-17899
Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.1 Description The issue concerns hard-coded credentials, including passwords or cryptographic keys, used by IBM Security Guardium for inbound authentication, communication with external components, or internal...
CVE-2020-4177: Use of Hard-coded Credentials
IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732...
CVE-2020-4182: Improper Neutralization of Input During Web Page Generation
IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174738...
CVE-2020-4187: Undefined Security Weakness
IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805...
CVE-2020-4180: Improper Neutralization of Special Elements used in an OS Command
IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 174735...
CVE-2020-4190: Use of Hard-coded Credentials
IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851...
Security Bulletin: IBM Security Guardium is affected by an Oracle MySQL vulnerabilities
Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-2808 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server Server: Optimizer component could allow an authenticated attacker to cause a denial of service...
Security Bulletin: IBM Security Guardium is affected by a jackson-databind vulnerabilities
Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-12814 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to obtain sensitive information, caused by a polymorphic typing issue. By sending a specially-crafted JSON...
Security Bulletin: IBM Security Guardium is affected by a FileServer functionality vulnerability
Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4292 DESCRIPTION: IBM Security Guardium could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. CV...
The vulnerability of the Security Guardium Big Data Intelligence software in managing security policies lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Security Guardium Big Data Intelligence software for managing security policies is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2012-2204
InfoSphere Guardium aixktap module: DoS...
Design/Logic Flaw
InfoSphere Guardium aixktap module: DoS...
CVE-2012-2204
InfoSphere Guardium aixktap module: DoS...
CVE-2012-2204
The CVE-2012-2204 entry concerns the InfoSphere Guardium aix_ktap module causing a DoS. Connected sources identify the affected component as the aix_ktap module within InfoSphere Guardium and classify the impact as Availability-related DoS, but the provided documents do not specify the exact root...