2.7
Low
CVE-2021-39023 IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when…
Description
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Encryption | 5.0.0 | No fix stated |
| Guardium Data Encryption | 4.0.0 | No fix stated |
Other CVEs of Guardium Data Encryption
The 12 CVEs of Guardium Data Encryption →
CVE-2021-39024
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting
4.8
Medium
CVE-2021-39027
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another…
3.0
Low
CVE-2021-39020
IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters
2.0
Low
CVE-2021-20414
IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly…
4.4
Medium