Skip to content
Sign in
3.7 Low

CVE-2019-4687 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters

Description

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823.

Affected products and versions

Product Affected versions Fixed in
Security Guardium Data Encryption 3.0.0.2 No fix stated

Other CVEs of Security Guardium Data Encryption

The 20 CVEs of Security Guardium Data Encryption →
CVE-2021-39025 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web… 5.3 Medium CVE-2021-39022 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value… 6.2 Medium CVE-2021-39026 IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information,… 5.9 Medium CVE-2021-39021 IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different… 3.7 Low
Track this CVE