12960 matches found
CVE-2020-4593
IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747...
CVE-2020-4593
IBM Security Guardium Insights 2.0.1 stores user credentials in plain text readable by a local user, exposing confidential data. Root cause: improper credential storage. Impact: confidentiality impact is high (local access, no user interaction). The IBM bulletin notes the vulnerability has been a...
CVE-2020-4587
The CVE-2020-4587 issue affects IBM Sterling Connect:Direct for UNIX (versions 4.2.0, 4.3.0, 6.0.0, 6.1.0). It is a stack-based buffer overflow caused by improper bounds checking in the ndmauth-related path, enabling a local attacker to gain root-level privileges on the affected CD UNIX installat...
CVE-2020-4170
CVE-2020-4170 affects IBM Security Guardium Insights 2.0.1 and is a Cross-Site Request Forgery vulnerability. The IBM Security bulletin confirms the issue and notes a remediation/fix for Guardium Insights 2.0.1 with a first fix available via IBM Passport Advantage, indicating an addressed vulnera...
CVE-2020-4382
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment or upgrade pertaining to xcat services. IBM X-Force ID: 179163...
CVE-2020-4170
IBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 174406...
CVE-2020-4165
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against...
CVE-2018-1985
IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207...
CVE-2020-4548
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID:...
CVE-2020-4687
IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679...
Input validation
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID:...
CVE-2020-4548
IBM Content Navigator 3.0.7 and 3.0.8 are affected by an input validation flaw that allows a malicious administrator to bypass the UI and send requests containing illegal characters that could be stored in the server database. The confirmed impact is low (per CVSS v3.1), with local-like privilege...
CVE-2020-4548
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID:...
CVE-2020-4381
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during deployment or upgrade if GUI specific services are enabled. IBM X-Force ID: 179162...
Authorization
A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019...
Security Bulletin: A vulnerability has been identified in IBM Elastic Storager Server GUI where authorised user can execute unauthorized function (CVE-2020-4378)
Summary A security vulnerability has been identified in all levels of IBM Elastic Storage Server GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4378 DESCRIPTION: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perfor...
CVE-2020-4686
IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678...
CVE-2020-4686
IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678...