5.9
Medium
CVE-2021-39072 IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to…
Description
IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 215581.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Guardium | 11.3 | No fix stated |
Other CVEs of Security Guardium
The 106 CVEs of Security Guardium →
CVE-2025-3473
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure…
6.7
Medium
CVE-2025-25029
IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping…
4.9
Medium
CVE-2025-25026
IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect…
4.3
Medium
CVE-2025-25025
IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error…
4.3
Medium