CVE-2016-0238 — Sensitive Information Exposure in IBM Security Guardium

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
3.7LOWNVD
EPSS
0.2%
top 55.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium
Timeline
PublishedJul 5
Latest updateMay 17

Description

IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/security_guardium6 versions+5
▶NVDibm/security_guardium6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-c344-cfmm-v5wj: IBM Security Guardium 9↗2022-05-17
▶
CVEList
CVE-2016-0238: IBM Security Guardium 9↗2017-07-05
▶
CVE-2016-0238 — Sensitive Information Exposure in IBM | cvebase