6.2
Moyenne
CVE-2021-39022 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value…
Description
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Guardium Data Encryption | 5.0.0.0 | Pas de correctif indiqué |
| Security Guardium Data Encryption | 4.0.0.0 | Pas de correctif indiqué |
Autres CVE de Security Guardium Data Encryption
Les 20 CVE de Security Guardium Data Encryption →
CVE-2021-39025
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web…
5.3
Moyenne
CVE-2021-39026
IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information,…
5.9
Moyenne
CVE-2021-39021
IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different…
3.7
Faible
CVE-2019-4687
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters
3.7
Faible