Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-30435, CVE-2023-30436, CVE-2023-30437)

Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2023-30437 DESCRIPTION: IBM Security Guardium could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. CVSS Base score: 5.3 CVSS Temporal Score:...

CVE-2023-30437

CVE-2023-30437 affects IBM Security Guardium 11.3, 11.4, and 11.5. Affected component: the web UI/API surface used to enumerate usernames via a specially crafted HTTP request, enabling information disclosure by an unauthenticated/unauthorized user. Root cause details are described across multiple...