CVE-2017-1774 — Sensitive Information Exposure in IBM Security Guardium BIG Data Intelligence

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 55.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium BIG Data Intelligence
Timeline
PublishedFeb 26
Latest updateMay 14

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-c85c-q2q3-96c6: IBM Security Guardium Big Data Intelligence (SonarG) 3↗2022-05-14
▶
CVEList
CVE-2017-1774: IBM Security Guardium Big Data Intelligence (SonarG) 3↗2018-02-26
▶

💬Community

1
Bugzilla
CVE-2015-3254 thrift: Infinite recursion via vectors involving the skip function↗2017-06-19
▶
CVE-2017-1774 — Sensitive Information Exposure in IBM | cvebase