3.7
Faible
CVE-2021-20416 IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information,…
Description
IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardium Data Encryption | 4.0.0.4 | Pas de correctif indiqué |
| Guardium Data Encryption | 3.0.0.2 | Pas de correctif indiqué |
Autres CVE de Guardium Data Encryption
Les 12 CVE de Guardium Data Encryption →
CVE-2021-39024
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting
4.8
Moyenne
CVE-2021-39027
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another…
3.0
Faible
CVE-2021-39023
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when…
2.7
Faible
CVE-2021-39020
IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters
2.0
Faible