Code injection

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587...

CVE-2021-39077 IBM Security Guardium information disclosure

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587...

CVE-2021-39077 IBM Security Guardium information disclosure

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customized UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardiu...

PT-2022-10876 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 10.5 through 11.4 Description: The issue allows a local privileged user to read user credentials stored in plain clear text. Recommendations: For IBM Security Guardium versions 10.5 through 11.4, update to a...

CVE-2021-39077

CVE-2021-39077 affects IBM Security Guardium 10.5, 10.6, 11.0–11.4. The root cause is that Guardium stores user credentials in plaintext, allowing a local privileged user to read them. This vulnerability is documented in IBM/Red Hat advisories and is assigned an X-Force ID of 215587. Remediation ...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2022-34336)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID:CVE-2022-34336 DESCRIPTION: IBM...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2022-34165)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed...

Security Bulletin: IBM InfoSphere Guardium System x/Flex Systems appliances are affected by vulnerabilities in OpenSSL (CVE-2014-0076, CVE-2014-0160)

Abstract Security vulnerabilities have been discovered in OpenSSL. Content VULNERABILITY DETAILS: CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this...

Security Bulletin: IBM InfoSphere Guardium Database Activity Monitoring is affected by vulnerabilities in OpenSSL (CVE-2014-0076, CVE-2014-0160)

Abstract Security vulnerabilities have been discovered in OpenSSL that affect a 3rd party Component used by IBM InfoSphere Guardium. Content VULNERABILITY DETAILS: CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the...

Security Bulletin: Vulnerability in IBM InfoSphere Guardium Database Activity Monitoring (CVE-2010-2273)

Abstract Guardium Database Activity Monitoring is affected by multiple cross-site scripting XSS vulnerabilities in Dojo which could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2010-2273 CVSS: CVSS Base Score: 4....

Security Bulletin: InfoSphere Guardium Data Redaction Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

Security Bulletin: InfoSphere Guardium Remote File Disclosure Vulnerability (CVE-2012-3337)

Abstract Relative path traversal vulnerability in InfoSphere Guardium allows remote unauthenticated attackers to download arbitrary files via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3337 DESCRIPTION: Multiple SQL injection vulnerabilities in several files allow remote...

Security Bulletin: Unspecified vulnerability in InfoSphere Guardium allows remote unauthenticated attackers to create unprivileged user accounts (CVE-2012-3338)

Abstract Unspecified vulnerability in InfoSphere Guardium allows remote unauthenticated attackers to create unprivileged user accounts. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3338 DESCRIPTION: There is a way for an attacker to login to the InfoSphere Guardium User Interface with the know...

Security Bulletin: XML External Entity (XXE) security vulnerability in InfoSphere Guardium (CVE-2012-3339)

Abstract XML External Entity XXE security vulnerability in InfoSphere Guardium allows remote authenticated users to obtain sensitive information via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3339 DESCRIPTION: User can get to an error report containing content of a file ...

Security Bulletin: XML External Entity (XXE) security vulnerability in InfoSphere Guardium (CVE-2012-3340)

Abstract XML External Entity XXE security vulnerability in InfoSphere Guardium allows remote authenticated users to obtain sensitive information via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3340 DESCRIPTION: User can get to an error report containing content of a file ...

Security Bulletin: InfoSphere Guardium Data Redaction affected by SSL vulnerability in Apache Axis2 (CVE-2012-5785)

Abstract An SSL vulnerability exists in Apache Axis which is used by InfoSphere Guardium Data Redaction to process HTTPS requests from the Redaction SOAP API . Content VULNERABILITY DETAILS: CVE ID: CVE-2012-5785 DESCRIPTION: Apache Axis2/Java, as used in multiple products, could allow a remote...

Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium (CVE-2012-3309)

Abstract Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium CVE-2012-3309 Content SUMMARY: Account creation panel is susceptible to cross site request forgery. VULNERABILITY DETAILS: CVE ID: CVE-2012-3309 DESCRIPTION: Account creation panel is susceptible to cross site request forge...

Security Bulletin: Security vulnerability in IBM InfoSphere Guardium S-TAP for DB2 on z/OS (CVE-2013-0490)

Abstract An unspecified vulnerability in IBM InfoSphere Guardium S-TAP for DB2 on z/OS v8.1 could allow local attackers to execute arbitrary commands via unknown vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0490 CVSS: CVSS Base Score: 7.2 CVSS Temporal Score: See...

Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium (CVE-2012-3312)

Abstract Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium CVE-2012-3312 Content SUMMARY: Datasource definition editor sends password in clear text. VULNERABILITY DETAILS: CVE ID: CVE-2012-3312 DESCRIPTION: The datasource definition editor, login and password f...