IBM Security Guardium Big Data Intelligence (SonarG) Information Disclosure Vulnerability

IBM Security Guardium and IBM Security Guardium Big Data Intelligence SonarG are both products of IBM Corporation in the U.S. IBM Security Guardium is a suite of platforms that provide data protection capabilities. The platform includes features such as customized UI, report management, and...

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

PT-2020-17950

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Big Data Intelligence version 1.0 SonarG Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations...

CVE-2020-4254: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

Security Guardium Big Data Intelligence Operational Data Protection Unauthorized Access

The vulnerability of the Security Guardium Big Data Intelligence software for managing security policies is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2019-4330

IBM Security Guardium Big Data Intelligence SonarG 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210...

CVE-2019-4339

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418...

CVE-2019-4329

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209...

IBM Security Guardium Big Data Intelligence Information Disclosure Vulnerability (CNVD-2019-38277)

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...

CVE-2019-4329: Undefined Security Weakness

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209...

PT-2019-17041 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence SonarG version 4.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

CVE-2019-4314: Cleartext Storage of Sensitive Information

IBM Security Guardium Big Data Intelligence SonarG 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141...

CVE-2019-4309: Use of Hard-coded Credentials

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035...

CVE-2019-4330: Reliance on Cookies without Validation and Integrity Checking

IBM Security Guardium Big Data Intelligence SonarG 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210...

CVE-2019-4306: Exposure of Resource to Wrong Sphere

IBM Security Guardium Big Data Intelligence SonarG 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-Force ID: 160986...

Unspecified Vulnerability in IBM Security Guardium Big Data Intelligence (CNVD-2019-38278)

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...

CVE-2019-4339: Inadequate Encryption Strength

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418...

PT-2019-17034

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Big Data Intelligence SonarG version 4.0 Description The issue is related to incomplete blacklisting for input validation, which allows attackers to bypass application controls. This results in a direct impact to the syst...

PT-2019-17035 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence SonarG version 4.0 Description: The issue is related to the software not setting the secure attribute for cookies in HTTPS sessions. This could cause the user agent to send those cookies in plaintex...

CVE-2019-4307: Insufficiently Protected Credentials

IBM Security Guardium Big Data Intelligence SonarG 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987...