73 matches found
CVE-2020-4224
IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133...
Information disclosure
IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133...
CVE-2020-4224
CVE-2020-4224 affects IBM StoredIQ 7.6.0.17–7.6.0.20, where data in certain directories was not encrypted when containing symbolic links, enabling local disclosure of sensitive information. The vulnerability stems from insufficient encryption in affected directory data, as documented by IBM and m...
CVE-2020-4224
IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133...
IBM StoredIQ Information Disclosure Vulnerability
IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. An information disclosure vulnerability exists in IBM...
Security Bulletin: Information Disclosure in IBM StoredIQ (CVE-2020-4224)
Summary IBM StoredIQ has addressed the following information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4224 DESCRIPTION: IBM StoredIQ could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links...
IBM StoredIQ Cross-Site Request Forgery Vulnerability (CNVD-2019-31126)
IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. A cross-site request forgery vulnerability exists in IBM...
CVE-2019-4167
IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158700...
CVE-2019-4167
IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158700...
Cross site request forgery (csrf)
IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158700...
CVE-2019-4167
IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158700...
CVE-2019-4167
Summary: CVE-2019-4167 affects IBM StoredIQ 7.6.0 (versions 7.6.0.0–7.6.0.18). The vulnerability is a cross-site request forgery that could allow an attacker to perform malicious and unauthorized actions on behalf of a trusted user. Technical details: Root cause is CSRF in the StoredIQ web interf...
PT-2019-16945 · Ibm · Ibm Storediq
Name of the Vulnerable Software and Affected Versions: IBM StoredIQ version 7.6.0 Description: The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting malicious actions from a user that the website...
Security Bulletin: IBM StoredIQ is affected by a cross-site request forgery (CVE-2019-4167)
Summary IBM StoredIQ has addressed the following vulnerability: Cross-site request forgery. Vulnerability Details CVEID: CVE-2019-4167 DESCRIPTION: IBM StoredIQ is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from...
IBM StoredIQ Input Validation Error Vulnerability
IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. An input validation error vulnerability exists in IBM...
IBM StoredIQ Access Control Error Vulnerability
IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. An access control error vulnerability exists in IBM Stored...
Security Bulletin: IBM StoredIQ is affected by a missing function level access control vulnerability (CVE-2019-4163)
Summary IBM StoredIQ has addressed the following vulnerability: Missing function level access control. Vulnerability Details CVEID: CVE-2019-4163 DESCRIPTION: IBM StoreIQ could allow an authenticated user to obtain sensitive information that a privileged user should only be allowed to view. CVSS...
Security Bulletin: IBM StoredIQ is affected by a denial of service attack vulnerability (CVE-2019-4165)
Summary IBM StoredIQ has addressed the following vulnerability: Denial of service attack. Vulnerability Details CVEID: CVE-2019-4165 DESCRIPTION: IBM StoredIQ could allow a remote attacker to cause a denial of service attack using repeated requests to the server. CVSS Base Score: 5.3 CVSS Tempora...
CVE-2019-4166
IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that...
CVE-2019-4166
IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that...