CVE-2023-26270

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute...

CVE-2023-26272

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID:...

Code injection

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126...

Sql injection

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute...

CVE-2023-26270

CVE-2023-26270 affects IBM Guardium Data Encryption (GDE) Guardium Cloud Key Manager (GCKM) 1.10.3. The root cause is an Angular template injection flaw that could allow a remote attacker to execute arbitrary code. IBM and related sources list the remediation as upgrading to GCKM 1.10.4. Public r...

CVE-2023-26271

IBM Guardium Data Encryption (GCKM) 1.10.3 and earlier is affected by CVE-2023-26271 due to an inadequate account lockout that could allow remote brute-forcing of credentials. The issue affects Guardium Cloud Key Manager (GCKM) within IBM Guardium Data Encryption; root cause described as improper...

CVE-2023-26272

CVE-2023-26272 affects IBM Guardium Data Encryption (Guardium Cloud Key Manager, GCKM) up to version 1.10.3. The root cause is a detailed technical error message revealed in the browser, enabling an information-disclosure vulnerability. Impact is information exposure of sensitive data; no exploit...

Security Bulletin: IBM Guardium Data Encryption (GDE) has multiple security vulnerability (CVE-2023-26272,CVE-2023-26271,CVE-2023-26270)

Summary Multiple security vulnerabilities in Guardium Data EncryptionGDE CVE-2023-26272,CVE-2023-26271,CVE-2023-26270. Please apply the latest version for the fixes. Vulnerability Details CVEID:CVE-2023-26272 DESCRIPTION: IBM Security Guardium Data Encryption could allow a remote attacker to obta...

Security Bulletin: Vulnerability CVE-2021-39023 in IBM Guardium Data Encryption (GDE)

Summary Vulnerability identified in IBM Guardium Data Encryption GDE. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2021-39023 DESCRIPTION: IBM Guardium Data Encryption GDE could allow a remote attacker to obtain sensitive information when a detailed technical...

Security Bulletin: IBM Guardium Data Encryption is vulnerable to cross-site scripting (CVE-2020-7676)

Summary A vulnerability to cross-site scripting exists in angular.js which is used in IBM Guardium Data Encryption GDE. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2020-7676 DESCRIPTION: angular.js is vulnerable to cross-site scripting, caused by improper...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Guardium Data Encryption (GDE) (CVE-2021-45105 and CVE-2021-45046)

Summary Vulnerability in Apache Log4j affects IBM Guardium Data Encryption GDE CVE-2021-45105 and CVE-2021-45046. The patch includes Apache Log4j 2.17. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the failure to protect from...