3.7
Faible
CVE-2017-1272 IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters
Description
IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Guardium | 10.5 | Pas de correctif indiqué |
| Security Guardium | 10 | Pas de correctif indiqué |
Autres CVE de Security Guardium
Les 106 CVE de Security Guardium →
CVE-2025-3473
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure…
6.7
Moyenne
CVE-2025-25029
IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping…
4.9
Moyenne
CVE-2025-25026
IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect…
4.3
Moyenne
CVE-2025-25025
IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error…
4.3
Moyenne