CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22307 – IBM Security Guardium privilege escalation
https://notcve.org/view.php?id=CVE-2022-22307
IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753. IBM Security Guardium v11.3, v11.4 y v11.5 podría permitir a un usuario local obtener privilegios elevados debido a comprobaciones de autorización incorrectas. ID de IBM X-Force: 216753. • https://exchange.xforce.ibmcloud.com/vulnerabilities/216753 https://www.ibm.com/support/pages/node/6999317 • CWE-863: Incorrect Authorization •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-0041 – IBM Security Guardium session fixation
https://notcve.org/view.php?id=CVE-2023-0041
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657. IBM Security Guardium v11.5 podría permitir a un usuario tomar el control de la sesión de otro usuario debido a una caducidad de sesión insuficiente. IBM X-Force ID: 243657. • https://exchange.xforce.ibmcloud.com/vulnerabilities/243657 https://www.ibm.com/support/pages/node/7000021 • CWE-613: Insufficient Session Expiration •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2022-39166 – IBM Security Guardium information disclosure
https://notcve.org/view.php?id=CVE-2022-39166
IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405. IBM Security Guardium 11.4 podría permitir a un usuario privilegiado obtener información confidencial dentro de una respuesta HTTP. ID de IBM X-Force: 235405. • https://exchange.xforce.ibmcloud.com/vulnerabilities/235405 https://www.ibm.com/support/pages/node/6848317 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.4EPSS: 0%CPEs: 4EXPL: 0CVE-2021-39077 – IBM Security Guardium information disclosure
https://notcve.org/view.php?id=CVE-2021-39077
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587. IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3 y 11.4 almacena las credenciales de usuario en texto plano que puede ser leído por un usuario local privilegiado. ID de IBM X-Force: 215587. • https://exchange.xforce.ibmcloud.com/vulnerabilities/215587 https://www.ibm.com/support/pages/node/6831647 • CWE-312: Cleartext Storage of Sensitive Information CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2021-39074
https://notcve.org/view.php?id=CVE-2021-39074
IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Security Guardium versión 11.4, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista, conllevando potencialmente a una divulgación de credenciales en una sesión confiable • https://exchange.xforce.ibmcloud.com/vulnerabilities/215583 https://www.ibm.com/support/pages/node/6598759 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •