PT-2016-4111 · Ibm · Ibm Security Guardium

Chris Shepherd + 6 · Published 2016-10-22 · Updated 2016-11-28 · CVE-2016-0247

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 8.2 before p310 IBM Security Guardium versions 9.x through 9.5 before p700 IBM Security Guardium versions 10.x through 10.1 before p100

Description The issue allows local users to obtain sensitive cleartext information via unspecified vectors, which can include password information.

Recommendations For IBM Security Guardium version 8.2, update to p310 or later. For IBM Security Guardium versions 9.x through 9.5, update to p700 or later. For IBM Security Guardium versions 10.x through 10.1, update to p100 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0247

Affected Products

Ibm Security Guardium

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21990368 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0247 · Security Note
• http://securityfocus.com/bid/93341 · Note