Security Bulletin: IBM Security Guardium is affected by an Improper Certificate Validation vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1509 DESCRIPTION: IBM Security Guardium EcoSystem does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a...

CVE-2018-1509

The CVE-2018-1509 entry affects IBM Security Guardium EcoSystem 10.5. The issue is improper certificate validation, allowing an attacker to perform a MITM attack to spoof a trusted entity or feed spoofed data from a trusted host. IBM’s bulletin confirms the affected product/version and provides r...