IBM Security Guardium Information Disclosure Vulnerability (CNVD-2019-00994)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in EcoSystem in IBM Security Guardium...

IBM Security Guardium Man-in-the-Middle Attack Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium version 10.5...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-24842)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium version 10.5...

CVE-2018-1509

IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...

CVE-2018-1498

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

CVE-2018-1498

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

CVE-2018-1509

IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...

Code injection

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

Code injection

IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...

CVE-2018-1498

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

CVE-2018-1509

IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...

CVE-2018-1498

IBM Security Guardium EcoSystem 10.5 stores user credentials in plaintext, readable by a local user. Root cause: credentials stored in clear text. Impact per sources: local access could disclose credentials; no remote exploit detailed. Remediation: IBM lists a fix for Guardium 10.5 (remediation/f...

CVE-2018-1509

The CVE-2018-1509 entry affects IBM Security Guardium EcoSystem 10.5. The issue is improper certificate validation, allowing an attacker to perform a MITM attack to spoof a trusted entity or feed spoofed data from a trusted host. IBM’s bulletin confirms the affected product/version and provides r...

PT-2018-12857

Name of the Vulnerable Software and Affected Versions IBM Security Guardium EcoSystem version 10.5 Description The issue concerns the storage of user credentials in plain text, allowing a local user to read them. Recommendations For IBM Security Guardium EcoSystem version 10.5, consider restricti...

CVE-2018-1509: Improper Certificate Validation

IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...

PT-2018-12879

Name of the Vulnerable Software and Affected Versions IBM Security Guardium EcoSystem version 10.5 Description The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle MITM attack. This could lead to the software connecting to a malicious host while believin...

CVE-2018-1498: Insufficiently Protected Credentials

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

Security Bulletin: IBM Security Guardium is affected by a Public disclosed vulnerability from Apache Struts vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1327 DESCRIPTION: Apache Struts is vulnerable to a denial of service. By sending a specially crafted XML request using the XStream handler with the Struts REST plugin, a remote attacker...

Security Bulletin: IBM Security Guardium is affected by a Bouncy Castle vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-5382 DESCRIPTION: Bouncy Castle could allow a local attacker to obtain sensitive information, caused by an error in the BKS version 1 keystore files. By utilizing an HMAC that is only 16...

Security Bulletin: IBM Security Guardium is affected by a Password in Clear Text vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1498 DESCRIPTION: IBM Security Guardium EcoSystem stores user credentials in plain in clear text which can be read by a local user. CVSS Base Score: 6.2 CVSS Temporal Score: See for the...