CVE-2020-4690

IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 186697...

CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

Information disclosure

IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355...

Hardcoded credentials

IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 186697...

Code injection

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539...

Design/Logic Flaw

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 19923...

Code injection

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

Code injection

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633...

Information disclosure

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195569...

Information disclosure

IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate validation. IBM X-Force ID: 208155...

Design/Logic Flaw

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...

CVE-2021-38864

IBM Security Verify Bridge 1.0.5.0 is affected by an information-disclosure vulnerability due to improper certificate validation. The issue could allow a user to obtain sensitive information over the network. IBM’s security bulletin indicates fixes in a later release (v1.0.7), so upgrading to IBM...

CVE-2021-20563

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 19923...

CVE-2021-20485

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197667...

CVE-2021-20484

CVE-2021-20484 affects IBM Sterling File Gateway (and related Sterling B2B Integrator components) with a cross-site scripting vulnerability in the Web UI. According to IBM’s security bulletin, versions 2.2.0.0 through 6.1.0.3 are affected; exploitation could allow an attacker to embed arbitrary J...

CVE-2021-20435

The CVE-2021-20435 issue affects IBM Security Verify Bridge 1.0.5.0, where improper certificate validation can allow a local attacker to disclose sensitive information. The vulnerability arises from failing to properly validate certificates, enabling information disclosure that could aid further ...

CVE-2021-20435

IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355...

CVE-2021-20434

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346...

CVE-2020-4941

IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941...

CVE-2020-4941

CVE-2020-4941 affects IBM Edge 4.2 and is an information-disclosure vulnerability where error pages could reveal sensitive server version information, aiding targeted attacks. The IBM Security Bulletin confirms an Unexpected Content-Type vulnerability with a CVSSv3 base score of 4.3 (MEDIUM) and ...