12 results (0.002 seconds)

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4603

https://notcve.org/view.php?id=CVE-2020-4603

IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880. IBM Security Guardium Insights versión 2.0.1, lleva a cabo una operación en un nivel de privilegio superior al nivel mínimo requerido, lo que crea nuevas debilidades o amplifica las consecuencias de otras debilidades. IBM X-Force ID: 184880 • https://exchange.xforce.ibmcloud.com/vulnerabilities/184880 https://www.ibm.com/support/pages/node/6323297 • CWE-269: Improper Privilege Management •

CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4175

https://notcve.org/view.php?id=CVE-2020-4175

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684. IBM Security Guardium Insights versión 2.0.1, podría permitir a un atacante remoto obtener información confidencial, causada por el fallo al habilitar apropiadamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información confidencial usando técnicas de tipo man in the middle. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174684 https://www.ibm.com/support/pages/node/6323297 • CWE-862: Missing Authorization •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4172

https://notcve.org/view.php?id=CVE-2020-4172

IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 174408. IBM Security Guardium Insights versión 2.0.1, almacena información confidencial en parámetros de URL. Esto puede conllevar a una divulgación de información si partes no autorizadas presentan acceso a las URL por medio de los registros del servidor, encabezado referrer o el historial del navegador. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174408 https://www.ibm.com/support/pages/node/6323297 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4171

https://notcve.org/view.php?id=CVE-2020-4171

IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407. IBM Security Guardium Insights versión 2.0.1, permite a páginas web ser almacenadas localmente, las cuales pueden ser leídas por otro usuario en el sistema. IBM X-Force ID: 174407 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174407 https://www.ibm.com/support/pages/node/6323297 • CWE-922: Insecure Storage of Sensitive Information •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-4169

https://notcve.org/view.php?id=CVE-2020-4169

IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174405. IBM Security Guardium Insights versión 2.0.1, usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 174405 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174405 https://www.ibm.com/support/pages/node/6323297 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •