PT-2016-4109 · Ibm · Ibm Security Guardium

Chris Shepherd + 6 · Published 2016-10-22 · Updated 2017-04-07 · CVE-2016-0242

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.x through 10.1 before p100

Description The issue allows remote authenticated users to obtain sensitive information by reading an Application Error message.

Recommendations For IBM Security Guardium versions 10.x through 10.1 before p100, update to a version that includes the p100 patch to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0242

Affected Products

Ibm Security Guardium

References · 4

• https://osv.dev/vulnerability/CVE-2016-0242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0242 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21990229 · Vendor Advisory
• http://securityfocus.com/bid/93825 · Note