Not rated
CVE-2016-0238 IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request
Description
IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Guardium 10.1 | 10.1 → 10.1.2 | No fix stated |
| Security Guardium | 10.0 | No fix stated |
| Security Guardium | 9.5 | No fix stated |
| Security Guardium | 9.1 | No fix stated |
| Security Guardium | 9.0 | No fix stated |
Other CVEs of Security Guardium
The 106 CVEs of Security Guardium →
CVE-2025-3473
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure…
6.7
Medium
CVE-2025-25029
IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping…
4.9
Medium
CVE-2025-25026
IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect…
4.3
Medium
CVE-2025-25025
IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error…
4.3
Medium