Security Bulletin: Missing Authentication for Critical Function affects IBM Security Guardium (CVE-2017-1258)

Summary IBM Security Guardium does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1258 DESCRIPTION: IBM Security Guardium does...

CVE-2017-1258

IBM Security Guardium has a missing authentication check for a critical resource, allowing anonymous access. Affected versions include Guardium 9.0, 9.1 and 9.5, and 10.0, 10.0.1, 10.1, 10.1.2. CVSSv3 base score 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Remediation/fixes are provided via IBM Fix...