Page 2 of 29 results (0.012 seconds)

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20428

https://notcve.org/view.php?id=CVE-2021-20428

24 May 2021 — IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315. IBM Security Guardium versión 11.2, podría permitir a un atacante remoto conseguir información confidencial cuando es devuelto un mensaje de error técnico detallado en el navegador. Esta información podría ser usada en nuevos ataques contra el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/196315 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20426

https://notcve.org/view.php?id=CVE-2021-20426

24 May 2021 — IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313. IBM Security Guardium versión 11.2, contiene credenciales embebidas, como una contraseña o clave criptográfica, que usa para su propia autenticación entrante, comunicación saliente a componentes externos o cifrado de datos internos. IBM X-Force ID: 1963... • https://exchange.xforce.ibmcloud.com/vulnerabilities/196313 • CWE-798: Use of Hard-coded Credentials •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20419

https://notcve.org/view.php?id=CVE-2021-20419

24 May 2021 — IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280. IBM Security Guardium versión 11.2, usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 196280 • https://exchange.xforce.ibmcloud.com/vulnerabilities/196280 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20389

https://notcve.org/view.php?id=CVE-2021-20389

24 May 2021 — IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770. IBM Security Guardium versión 11.2, almacena las credenciales de usuario en texto plano sin cifrar que puede ser leído por un usuario local.  IBM X-Force ID: 195770 • https://exchange.xforce.ibmcloud.com/vulnerabilities/195770 • CWE-522: Insufficiently Protected Credentials •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-20386

https://notcve.org/view.php?id=CVE-2021-20386

24 May 2021 — IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767. IBM Security Guardium versión 11.2, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcio... • https://exchange.xforce.ibmcloud.com/vulnerabilities/195767 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-20385

https://notcve.org/view.php?id=CVE-2021-20385

24 May 2021 — IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 195766. IBM Security Guardium versión 11.2, podría permitir a un atacante autenticado remoto ejecutar comandos arbitrarios en el sistema. Mediante el envío de una petición especialmente diseñada, un atacante podría explotar esta vulnerabilidad p... • https://exchange.xforce.ibmcloud.com/vulnerabilities/195766 •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4990

https://notcve.org/view.php?id=CVE-2020-4990

24 May 2021 — IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710. IBM Security Guardium versión 11.2 es vulnerable a una inyección SQL. Un atacante remoto podría enviar declaraciones SQL especialmente diseñadas, que podrían permitir al atacante visualizar, agregar, modificar o eliminar información en la base de datos del back... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192710 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4184

https://notcve.org/view.php?id=CVE-2020-4184

15 Mar 2021 — IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802.. IBM Security Guardium versión 11.2, lleva a cabo una operación a un nivel de privilegio superior al nivel mínimo requerido, lo que crea nuevas debilidades o amplifica las consecuencias de otras debilidades. IBM X-Force ID: 174802 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174802 • CWE-269: Improper Privilege Management •

CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-4952

https://notcve.org/view.php?id=CVE-2020-4952

27 Jan 2021 — IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028. IBM Security Guardium versión 11.2, podría permitir a un usuario autenticado conseguir acceso root debido a un control de acceso inapropiado. IBM X-Force ID: 192028 • https://exchange.xforce.ibmcloud.com/vulnerabilities/192028 •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-4189

https://notcve.org/view.php?id=CVE-2020-4189

27 Jan 2021 — IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850. IBM Security Guardium versión 11.2, divulga información confidencial en los encabezados de respuesta que podría ser usada en futuros ataques contra el sistema. IBM X-Force ID: 174850 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174850 • CWE-312: Cleartext Storage of Sensitive Information •