CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4180
https://notcve.org/view.php?id=CVE-2020-4180
IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 174735. IBM Security Guardium versión 11.1, podría permitir a un atacante autenticado remoto ejecutar comandos arbitrarios en el sistema. Mediante el envío de una petición especialmente diseñada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174735 https://www.ibm.com/support/pages/node/6218960 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4177
https://notcve.org/view.php?id=CVE-2020-4177
IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732. IBM Security Guardium versión 11.1, contiene credenciales embebidas, tales como una contraseña o clave criptográfica, que usa para su propia autenticación entrante, comunicación saliente a componentes externos o cifrado de datos internos. IBM X-Force ID: 174732. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174732 https://www.ibm.com/support/pages/node/6218970 • CWE-798: Use of Hard-coded Credentials •