CVE-2023-26270

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute...

CVE-2023-26272

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID:...

Sql injection

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute...

Code injection

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126...

CVE-2023-26270

CVE-2023-26270 affects IBM Guardium Data Encryption (GDE) Guardium Cloud Key Manager (GCKM) 1.10.3. The root cause is an Angular template injection flaw that could allow a remote attacker to execute arbitrary code. IBM and related sources list the remediation as upgrading to GCKM 1.10.4. Public r...

CVE-2023-26271

IBM Guardium Data Encryption (GCKM) 1.10.3 and earlier is affected by CVE-2023-26271 due to an inadequate account lockout that could allow remote brute-forcing of credentials. The issue affects Guardium Cloud Key Manager (GCKM) within IBM Guardium Data Encryption; root cause described as improper...

CVE-2023-26272

CVE-2023-26272 affects IBM Guardium Data Encryption (Guardium Cloud Key Manager, GCKM) up to version 1.10.3. The root cause is a detailed technical error message revealed in the browser, enabling an information-disclosure vulnerability. Impact is information exposure of sensitive data; no exploit...

Security Bulletin: IBM Guardium Data Encryption (GDE) has multiple security vulnerability (CVE-2023-26272,CVE-2023-26271,CVE-2023-26270)

Summary Multiple security vulnerabilities in Guardium Data EncryptionGDE CVE-2023-26272,CVE-2023-26271,CVE-2023-26270. Please apply the latest version for the fixes. Vulnerability Details CVEID:CVE-2023-26272 DESCRIPTION: IBM Security Guardium Data Encryption could allow a remote attacker to obta...

Security Bulletin: Vulnerability CVE-2021-39023 in IBM Guardium Data Encryption (GDE)

Summary Vulnerability identified in IBM Guardium Data Encryption GDE. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2021-39023 DESCRIPTION: IBM Guardium Data Encryption GDE could allow a remote attacker to obtain sensitive information when a detailed technical...

Security Bulletin: IBM Guardium Data Encryption is vulnerable to cross-site scripting (CVE-2020-7676)

Summary A vulnerability to cross-site scripting exists in angular.js which is used in IBM Guardium Data Encryption GDE. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2020-7676 DESCRIPTION: angular.js is vulnerable to cross-site scripting, caused by improper...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Guardium Data Encryption (GDE) (CVE-2021-45105 and CVE-2021-45046)

Summary Vulnerability in Apache Log4j affects IBM Guardium Data Encryption GDE CVE-2021-45105 and CVE-2021-45046. The patch includes Apache Log4j 2.17. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the failure to protect from...