CVE-2018-1372

CVE-2018-1372 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The vulnerability arises from a default weak password policy, permitting account compromise without strong passwords by default. IBM’s advisory references a remediation to version 3.2, indicating an updated password p...

CVE-2018-1425

CVE-2018-1425 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1, which uses weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The IBM Security Guardium Big Data Intelligence (SonarG) product is listed as affected wit...

PT-2018-12361

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Big Data Intelligence SonarG version 3.1 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations...

PT-2018-12113

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Big Data Intelligence SonarG version 3.1 Description The issue is related to the default password settings, which do not require strong passwords for users. This makes it easier for attackers to compromise user accounts...

IBM Security Guardium Big Data Intelligence (SonarG) Information Disclosure Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. An information disclosure vulnerability exists in IBM Security...

CVE-2018-1372: Weak Password Requirements

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772...

CVE-2018-1425: Inadequate Encryption Strength

IBM Security Guardium Big Data Intelligence SonarG 3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139003...

CVE-2018-1377

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 137778...

CVE-2017-1774

IBM Security Guardium Big Data Intelligence SonarG 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818...

Information disclosure

IBM Security Guardium Big Data Intelligence SonarG 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818...

CVE-2017-1774

IBM Security Guardium Big Data Intelligence SonarG 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818...

CVE-2018-1377

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 137778...

CVE-2017-1774

IBM Security Guardium Big Data Intelligence SonarG 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818...

CVE-2017-1774

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is affected by an information disclosure vulnerability (CVE-2017-1774). The IBM bulletin confirms that the product version 3.1 discloses sensitive information to unauthorized users, enabling potential follow‑on attacks. CVSS v3 base score 5...

CVE-2018-1377

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plaintext, exposing them to a local attacker (CVE-2018-1377). CVSSv3 base score 7.8 (HIGH) with local access and impact to confidentiality, integrity, and availability. IBM’s remediation is in version 3.2 ; upgrad...

CVE-2018-1377: Insufficiently Protected Credentials

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 137778...

PT-2018-12168

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Big Data Intelligence SonarG version 3.1 Description The issue concerns the storage of user credentials in plain text, allowing a local user to read them. Recommendations For IBM Security Guardium Big Data Intelligence...

PT-2018-6560

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence SonarG version 3.1 Description: The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. Recommendations: For IBM Security Guardium...

CVE-2017-1774: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Guardium Big Data Intelligence SonarG 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818...