Information Disclosure in IBM Guardium Data Encryption Product

CVE-2021-39020

What is CVE-2021-39020?

IBM Guardium Data Encryption versions 4.0.0.7 and earlier are vulnerable to an information disclosure issue, where sensitive data is exposed through URL parameters. This flaw can be exploited if unauthorized users gain access to URLs, potentially through server logs, referrer headers, or even browser history. This vulnerability can lead to the unintended exposure of confidential information, emphasizing the importance of securing URL data handling to prevent unauthorized access.

References