Ibm Security Guardium vulnerabilities

CVE-2021-20420 [MEDIUM] CVE-2021-20420: IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks against the system. IBM X-Force ID: 196281.

CVE-2021-20426 [CRITICAL] CWE-798 CVE-2021-20426: IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313.

CVE-2021-20557 [HIGH] CWE-78 CVE-2021-20557: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 199184.

CVE-2020-4990 [HIGH] CWE-89 CVE-2020-4990: IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially cr IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710.

CVE-2021-20389 [HIGH] CWE-522 CVE-2021-20389: IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770.

CVE-2021-20385 [HIGH] CVE-2021-20385: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 195766.

CVE-2021-20419 [HIGH] CWE-327 CVE-2021-20419: IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an at IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280.

CVE-2021-20428 [MEDIUM] CWE-209 CVE-2021-20428: IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a deta IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315.

CVE-2021-20386 [MEDIUM] CWE-79 CVE-2021-20386: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767.

CVE-2020-4184 [HIGH] CWE-269 CVE-2020-4184: IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimu IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802..

CVE-2020-4952 [HIGH] CVE-2020-4952: IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper acc IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.

CVE-2020-4189 [MEDIUM] CWE-312 CVE-2020-4189: IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be use IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850.

CVE-2020-4688 [HIGH] CWE-77 CVE-2020-4688: IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on th IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700.

CVE-2020-4921 [HIGH] CWE-89 CVE-2020-4921: IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send spe IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191398.

CVE-2020-4679 [MEDIUM] CWE-79 CVE-2020-4679: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424.

CVE-2020-4680 [MEDIUM] CWE-79 CVE-2020-4680: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426.

CVE-2020-4689 [MEDIUM] CWE-1236 CVE-2020-4689: IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execut IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696.

CVE-2020-4681 [MEDIUM] CWE-79 CVE-2020-4681: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427.

CVE-2020-4678 [MEDIUM] CVE-2020-4678: IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that t IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to. IBM X-Force ID: 186423.

CVE-2018-1501 [HIGH] CWE-306 CVE-2018-1501: IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive info IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID: 141226.