Data Leakage in IBM Security Guardium Data Encryption Due to Plain Text Storage of User Credentials
CVE-2019-4697

5.3MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
26 August 2020

Summary

IBM Security Guardium Data Encryption version 3.0.0.2 contains a vulnerability where user credentials are stored in plain text. This critical flaw allows authenticated users to read sensitive information, potentially compromising the security of the encrypted data managed by the application. Organizations utilizing this product should take immediate steps to mitigate the risks associated with this vulnerability. For further details, please refer to the official IBM support and vulnerability databases.

Affected Version(s)

Security Guardium Data Encryption 3.0.0.2

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.