CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4603
https://notcve.org/view.php?id=CVE-2020-4603
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880. IBM Security Guardium Insights versión 2.0.1, lleva a cabo una operación en un nivel de privilegio superior al nivel mínimo requerido, lo que crea nuevas debilidades o amplifica las consecuencias de otras debilidades. IBM X-Force ID: 184880 • https://exchange.xforce.ibmcloud.com/vulnerabilities/184880 • CWE-269: Improper Privilege Management •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4175
https://notcve.org/view.php?id=CVE-2020-4175
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684. IBM Security Guardium Insights versión 2.0.1, podría permitir a un atacante remoto obtener información confidencial, causada por el fallo al habilitar apropiadamente HTTP Strict Transport Security. Un a... • https://exchange.xforce.ibmcloud.com/vulnerabilities/174684 • CWE-862: Missing Authorization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4172
https://notcve.org/view.php?id=CVE-2020-4172
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 174408. IBM Security Guardium Insights versión 2.0.1, almacena información confidencial en parámetros de URL. Esto puede conllevar a una divulgación de información si partes no autorizadas presentan acceso a las URL por medio de los registros del servidor, encabezado re... • https://exchange.xforce.ibmcloud.com/vulnerabilities/174408 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4171
https://notcve.org/view.php?id=CVE-2020-4171
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407. IBM Security Guardium Insights versión 2.0.1, permite a páginas web ser almacenadas localmente, las cuales pueden ser leídas por otro usuario en el sistema. IBM X-Force ID: 174407 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174407 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4169
https://notcve.org/view.php?id=CVE-2020-4169
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174405. IBM Security Guardium Insights versión 2.0.1, usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 174405 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174405 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4167
https://notcve.org/view.php?id=CVE-2020-4167
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation mechanisms. IBM X-Force ID: 174403. IBM Security Guardium Insights versión 2.0.1, podría permitir a un atacante obtener información confidencial o llevar a cabo acciones no autorizadas debido a mecanismos de autenticación inapropiados. IBM X-Force ID: 174403 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174403 • CWE-287: Improper Authentication •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4166
https://notcve.org/view.php?id=CVE-2020-4166
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 174402. IBM Security Guardium Insights versión 2.0.1, podría permitir a un atacante remoto obtener información confidencial cuando un mensaje de error técnico detallado es devuelto en el navegador. Esta información podría ser usada en nuevos ataques contra el... • https://exchange.xforce.ibmcloud.com/vulnerabilities/174402 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4174
https://notcve.org/view.php?id=CVE-2020-4174
27 Aug 2020 — IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683. IBM Security Guardium Insights versión 2.0.1, usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 174683 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174683 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4598
https://notcve.org/view.php?id=CVE-2020-4598
24 Aug 2020 — IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 184823. IBM Security Guardium Insight... • https://exchange.xforce.ibmcloud.com/vulnerabilities/184823 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4593
https://notcve.org/view.php?id=CVE-2020-4593
24 Aug 2020 — IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747. IBM Security Guardium Insights versión 2.0.1, almacena credenciales de usuario en texto sin cifrar que puede ser leído por un usuario local. IBM X-Force ID: 184747. • https://exchange.xforce.ibmcloud.com/vulnerabilities/184747 • CWE-522: Insufficiently Protected Credentials •