Ibm Guardium Data Encryption vulnerabilities

CVE-2019-4691 [MEDIUM] CWE-79 CVE-2019-4691: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vuln IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171828.

CVE-2021-39027 [MEDIUM] CWE-116 CVE-2021-39027: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication w IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.

CVE-2021-20414 [MEDIUM] CVE-2021-20414: IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information d IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216.

CVE-2019-4688 [MEDIUM] CWE-565 CVE-2019-4688: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorizati IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cooki

CVE-2021-20413 [MEDIUM] CWE-209 CVE-2021-20413: IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive informa IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212.

CVE-2021-20417 [MEDIUM] CWE-209 CVE-2021-20417: IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive informa IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196219

CVE-2019-4693 [MEDIUM] CWE-522 CVE-2019-4693: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text w IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831.

CVE-2019-4695 [LOW] CWE-922 CVE-2019-4695: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.

CVE-2019-4699 [LOW] CWE-209 CVE-2019-4699: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensiti IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 171931.