Skip to content
Sign in
5.9 Medium

CVE-2018-1375 IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful…

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776.

Affected products and versions

Product Affected versions Fixed in
Security Guardium Big Data Intelligence 3.1 No fix stated

Other CVEs of Security Guardium Big Data Intelligence

The 22 CVEs of Security Guardium Big Data Intelligence →
CVE-2020-4254 IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could… 5.9 Medium CVE-2019-4339 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could… 5.9 Medium CVE-2019-4329 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which… 4.3 Medium CVE-2019-4330 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS… 3.1 Low
Track this CVE