Lucene search
K

1115 matches found

CNVD
CNVD
added 2021/01/14 12:0 a.m.6 views

IBM Security Guardium Data Encryption Weak Encryption Algorithm Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A weak cryptographic algorithm vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

7.5CVSS6.3AI score0.00578EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/14 12:0 a.m.8 views

IBM Security Guardium Data Encryption Improper Privilege Control Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An improper privilege control vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

8.1CVSS6.5AI score0.00428EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/14 12:0 a.m.2 views

IBM Security Guardium Data Encryption Information Disclosure Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. The vulnerability...

5.3CVSS8.3AI score0.00447EPSS
Exploits0References1
OSV
OSV
added 2021/01/13 6:15 p.m.1 views

CVE-2019-4702

IBM Security Guardium Data Encryption GDE 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...

8.1CVSS6.1AI score
Exploits0References2
OSV
OSV
added 2021/01/13 6:15 p.m.2 views

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

5.3CVSS6.1AI score0.00447EPSS
Exploits0References2
OSV
OSV
added 2021/01/13 6:15 p.m.1 views

CVE-2019-4160

IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...

7.5CVSS5.8AI score0.00578EPSS
Exploits0References2
NVD
NVD
added 2021/01/13 6:15 p.m.17 views

CVE-2019-4702

IBM Security Guardium Data Encryption GDE 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...

8.1CVSS5.4AI score0.00428EPSS
Exploits0References2
NVD
NVD
added 2021/01/13 6:15 p.m.16 views

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

5.3CVSS4.2AI score0.00447EPSS
Exploits0References2
NVD
NVD
added 2021/01/13 6:15 p.m.17 views

CVE-2019-4160

IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...

7.5CVSS6AI score0.00578EPSS
Exploits0References2
Prion
Prion
added 2021/01/13 6:15 p.m.12 views

Code injection

IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...

5CVSS7.1AI score0.00578EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/01/13 6:15 p.m.14 views

Code injection

IBM Security Guardium Data Encryption GDE 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...

5.5CVSS7.7AI score0.00428EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/13 5:40 p.m.21 views

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

3.7CVSS4.9AI score0.00447EPSS
Exploits0References2
CVE
CVE
added 2021/01/13 5:40 p.m.40 views

CVE-2019-4687

CVE-2019-4687 affects IBM Security Guardium Data Encryption (GDE) 3.0.0.2, where sensitive data is stored in URL parameters. The root cause is the disclosure risk from information in URLs that can be exposed via server logs, referrer headers, or browser history. The vulnerability is documented ac...

5.3CVSS5.6AI score0.00447EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/13 5:40 p.m.14 views

CVE-2019-4702

IBM Security Guardium Data Encryption GDE 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...

4.2CVSS7.8AI score0.00428EPSS
Exploits0References2
CVE
CVE
added 2021/01/13 5:40 p.m.48 views

CVE-2019-4160

CVE-2019-4160 affects IBM Guardium Data Encryption (GDE) version 3.0.0.2, which uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The issue is specific to GDE 3.0.0.2; IBM’s bulletin notes that fixes are available in GDE 4.0.0...

7.5CVSS7.7AI score0.00578EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/13 5:40 p.m.19 views

CVE-2019-4160

IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...

5.9CVSS7.2AI score0.00578EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/01/13 12:0 a.m.3 views

PT-2021-9115 · Ibm · Ibm Security Guardium Data Encryption

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description: The issue allows for potential information disclosure due to sensitive information being stored in URL parameters. This could be accessed by unauthorized parties through...

5.3CVSS6.4AI score0.00447EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.2 views

IBM Security Guardium Data Encryption (GDE) 信息泄露漏洞

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. The vulnerability...

5.3CVSS6.2AI score0.00447EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.1 views

IBM Security Guardium 加密问题漏洞

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A weak cryptographic algorithm vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

7.5CVSS6.6AI score0.00578EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.3 views

IBM Security Guardium Data Encryption 访问控制错误漏洞

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An improper privilege control vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

8.1CVSS6.2AI score0.00428EPSS
Exploits0References4
Rows per page
Query Builder