Data Leakage in IBM Security Guardium Data Encryption Due to Plain Text Storage of User Credentials
CVE-2019-4697
5.3MEDIUM
Summary
IBM Security Guardium Data Encryption version 3.0.0.2 contains a vulnerability where user credentials are stored in plain text. This critical flaw allows authenticated users to read sensitive information, potentially compromising the security of the encrypted data managed by the application. Organizations utilizing this product should take immediate steps to mitigate the risks associated with this vulnerability. For further details, please refer to the official IBM support and vulnerability databases.
Affected Version(s)
Security Guardium Data Encryption 3.0.0.2
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved