CVE-2017-1596

IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550...

CVE-2017-1598

IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611...

CVE-2017-1600

IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1757

IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858...

CVE-2017-1257

Summary: CVE-2017-1257 concerns an information disclosure in IBM Security Guardium. The vulnerability affects Guardium 10.x (notably 10.0, 10.0.x, 10.1, 10.1.x) where sensitive data can be disclosed to unauthorized users. The root cause is an information exposure weakness in Guardium that could e...

CVE-2017-1261

CVE-2017-1261 affects IBM Security Guardium. The vulnerability arises from Guardium storing potentially sensitive information in log files, which a local attacker could read. Affected product versions include Guardium 10.0, 10.0.1, 10.1, 10.1.2, and 10.1.3. IBM provides a fix (Remediation/First F...

CVE-2017-1262

CVE-2017-1262 affects IBM Security Guardium, versions 10.0, 10.0.1, 10.1, 10.1.2, and 10.1.3, which are vulnerable to HTTP response splitting via specially crafted URLs. The underlying issue permits a remote attacker to trigger a split response, enabling follow-on attacks such as Web cache poison...

CVE-2017-1266

CVE-2017-1266 affects IBM Security Guardium, with an incorrect permission assignment for a security-critical resource that can allow read/modify by unintended actors. Affected versions: Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3. Reported CVSS v3 base score around 4.2 (vector: CVSS:3.0/AV:N/AC:H...

CVE-2017-1270

Summary: IBM Security Guardium 10.0 has a fixable session-management issue: it does not renew the session variable after authentication, enabling potential session fixation/hijacking. Affected versions: Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3. Root cause: failure to renew the session value po...

CVE-2017-1595

IBM Security Guardium Database Activity Monitor (Guardium) is affected by CVE-2017-1595, a local information disclosure vulnerability. The IBM Security Guardium Database Activity Monitor product family (V10.0, 10.0.1, 10.1, 10.1.2, 10.1.3) could allow a local attacker to obtain highly sensitive i...

CVE-2017-1596

The CVE-2017-1596 entry affects IBM Security Guardium Database Activity Monitor (V10.0 to 10.1.3). It describes a local disclosure vulnerability in which a local attacker could obtain highly sensitive information via unspecified vectors. The IBM security bulletin confirms affected versions: 10.0,...

CVE-2017-1598

IBM Security Guardium Database Activity Monitor (V10.0–10.1.3) is affected by use of weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Root cause: cryptographic weakness in the product’s crypto implementation. Impact: potential confidentiality b...

CVE-2017-1600

IBM Security Guardium Database Activity Monitor is affected by CVE-2017-1600, a cross-site scripting vulnerability in the Web UI. The vulnerability allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products/versions include Gua...

PT-2017-12655

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue allows for session fixation or hijacking due to the failure to renew a session variable after successful authentication. This could force a user to utilize a cookie that may be known to ...

PT-2017-12604

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue allows a remote attacker to exploit it using a specially-crafted URL, causing the server to return a split response once the URL is clicked. This could enable the attacker to perform...

PT-2017-12634

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue allows a security-critical resource to be read or modified by unintended actors due to improper permission specification. Recommendations For IBM Security Guardium version 10.0, update t...

PT-2017-12582

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. Recommendations For IBM Security Guardium version 10.0, consider...

PT-2017-12599

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue concerns the storage of potentially sensitive information in log files. This information could be accessed by a local user. Recommendations For IBM Security Guardium version 10.0, consid...

PT-2017-14307

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description A local attacker could obtain highly sensitive information via unspecified vectors. Recommendations For IBM Security Guardium version 10.0, at the moment, there is no information about a newer...

PT-2017-14313

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description A local attacker could obtain highly sensitive information via unspecified vectors. Recommendations For IBM Security Guardium version 10.0, at the moment, there is no information about a newer...