8.8
High
CVE-2019-4713 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary…
Description
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Guardium Data Encryption | 3.0.0.2 | No fix stated |
Other CVEs of Security Guardium Data Encryption
The 20 CVEs of Security Guardium Data Encryption →
CVE-2021-39025
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web…
5.3
Medium
CVE-2021-39022
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value…
6.2
Medium
CVE-2021-39026
IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information,…
5.9
Medium
CVE-2021-39021
IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different…
3.7
Low