Security Guardium Insights (Ibm) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2022-01-26. Vendor: Ibm.

CVEs of Security Guardium Insights

• CVE-2021-29845 - CVSS 8.8 (high), 2022-01-26: IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. IBM X-Force ID: 205255.
• CVE-2021-29838 - CVSS 5.9 (medium), 2022-01-26: IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
• CVE-2021-29846 - CVSS 2.7 (low), 2022-01-26: IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID:…
• CVE-2020-4596 - CVSS 7.5 (high), 2021-01-13: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
• CVE-2020-4600 - CVSS 5.3 (medium), 2021-01-13: IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
• CVE-2020-4595 - CVSS 7.5 (high), 2021-01-13: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
• CVE-2020-4599 - CVSS 5.3 (medium), 2021-01-13: IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
• CVE-2020-4604 - CVSS 4.4 (medium), 2021-01-13: IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.
• CVE-2020-4594 - CVSS 7.5 (high), 2021-01-13: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
• CVE-2020-4597 - CVSS 4.3 (medium), 2021-01-13: IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…
• CVE-2020-4602 - CVSS 4.4 (medium), 2021-01-13: IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184836.
• CVE-2020-4603 - CVSS 7.2 (high), 2020-08-27: IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses…
• CVE-2020-4175 - CVSS 5.9 (medium), 2020-08-27: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
• CVE-2020-4167 - CVSS 6.5 (medium), 2020-08-27: IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation…
• CVE-2020-4172 - CVSS 5.3 (medium), 2020-08-27: IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have…
• CVE-2020-4166 - CVSS 5.3 (medium), 2020-08-27: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
• CVE-2020-4171 - CVSS 4.3 (medium), 2020-08-27: IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407.
• CVE-2020-4169 - CVSS 7.5 (high), 2020-08-27: IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
• CVE-2020-4174 - CVSS 7.5 (high), 2020-08-27: IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
• CVE-2020-4598 - CVSS 6.5 (medium), 2020-08-24: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit…
• CVE-2020-4593 - CVSS 4.4 (medium), 2020-08-24: IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747.
• CVE-2020-4170 - CVSS 4.3 (medium), 2020-08-24: IBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
• CVE-2020-4165 - CVSS 5.4 (medium), 2020-08-24: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious…
• CVE-2020-4173 - CVSS 4.3 (medium), 2020-07-09: IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the…