Guardium Data Encryption Security Vulnerabilities and Issues — Guardium Data Encryption CVE List

Lucene search

IbmGuardium Data Encryption

11 matches found

CVE•added 2022/02/18 6:15 p.m.•82 views

CVE-2021-39026

IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniq...

5.9CVSS5.4AI score0.00056EPSS

CVE•added 2022/03/10 8:15 p.m.•74 views

CVE-2021-39025

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863.

5.3CVSS5AI score0.00075EPSS

CVE•added 2022/05/05 4:15 p.m.•66 views

CVE-2021-39020

IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855.

5.3CVSS4.9AI score0.0008EPSS

CVE•added 2022/05/06 4:15 p.m.•56 views

CVE-2021-39027

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.

5CVSS5AI score0.00096EPSS

CVE•added 2022/02/04 10:32 p.m.•55 views

CVE-2021-39021

IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856.

5.3CVSS5AI score0.00088EPSS

CVE•added 2020/08/26 7:15 p.m.•41 views

CVE-2019-4686

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the in...

5.3CVSS5.7AI score0.00041EPSS

CVE•added 2021/06/28 4:15 p.m.•40 views

CVE-2021-20413

IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212.

5CVSS4.8AI score0.0009EPSS

CVE•added 2020/08/26 7:15 p.m.•37 views

CVE-2019-4701

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.

5.3CVSS5.9AI score0.00075EPSS

CVE•added 2020/08/26 7:15 p.m.•34 views

CVE-2019-4691

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.6AI score0.00062EPSS

CVE•added 2020/08/26 7:15 p.m.•34 views

CVE-2019-4692

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829.

5.3CVSS5.5AI score0.00075EPSS

CVE•added 2021/07/07 5:15 p.m.•28 views

CVE-2021-20416

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.

5.3CVSS5.6AI score0.00094EPSS