PT-2023-6904 · Ibm · Ibm Security Guardium

Publicado 2023-08-27 · Atualizado 2023-09-19 · CVE-2023-33852

Positive Technologies (AI Summary)

CVSS v2.0

8.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.4

Description The issue is related to SQL injection, where a remote attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. This is due to the lack of protection measures for the SQL query structure.

Recommendations For IBM Security Guardium version 11.4, as a temporary workaround, consider restricting access to the database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2023-07922

CVE-2023-33852

Produtos afetados

Ibm Security Guardium

Referências · 11

• https://bdu.fstec.ru/vul/2023-07922 · Nota de Segurança
• https://twitter.com/cracbot/status/1696039996300685454 · Publicação no Twitter
• https://twitter.com/TechFishNews/status/1695958325115134207 · Publicação no Twitter
• https://ibm.com/support/pages/node/7028514 · Aviso do Fabricante
• https://t.me/cvenotify/57499 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1695959782388093156 · Publicação no Twitter
• https://t.me/cibsecurity/69254 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1695932429377347908 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-33852 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/257614 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-33852 · Aviso do Fabricante