IBM Security Guardium Big Data Intelligence CVE-2019-4309 Hardcoded Credentials Vulnerability

Description

IBM Security Guardium Big Data Intelligence is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable system and perform unauthorized actions. Security Guardium Big Data Intelligence 4.0 is vulnerable.

Technologies Affected

• IBM Security Guardium Big Data Intelligence 4.0

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Permit local interactive access to known and trusted individuals only. Use of restricted environments such as chroot and jail may also limit exposure to this and other latent vulnerabilities.

Updates are available. Please see the references or vendor advisory for more information.