CVE-2019-4698
- EPSS 0.11%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:01
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 171929.
CVE-2019-4697
- EPSS 0.08%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:01
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938.
CVE-2019-4694
- EPSS 0.06%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal d...
CVE-2019-4693
- EPSS 0.02%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831.
CVE-2019-4692
- EPSS 0.08%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829.
CVE-2019-4691
- EPSS 0.06%
- Veröffentlicht 26.08.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:44:00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...
CVE-2019-4686
- EPSS 0.04%
- Veröffentlicht 26.08.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:43:59
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site th...
CVE-2019-4689
- EPSS 0.06%
- Veröffentlicht 26.08.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:44:00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensiti...
CVE-2019-4688
- EPSS 0.09%
- Veröffentlicht 26.08.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:43:59
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site th...