Data Leakage in IBM Security Guardium Data Encryption Due to Plain Text Storage of User Credentials

CVE-2019-4697

What is CVE-2019-4697?

IBM Security Guardium Data Encryption version 3.0.0.2 contains a vulnerability where user credentials are stored in plain text. This critical flaw allows authenticated users to read sensitive information, potentially compromising the security of the encrypted data managed by the application. Organizations utilizing this product should take immediate steps to mitigate the risks associated with this vulnerability. For further details, please refer to the official IBM support and vulnerability databases.

References