PT-2016-4112 · Ibm · Ibm Security Guardium

Chris Shepherd + 6 · Published 2016-09-26 · Updated 2016-11-28 · CVE-2016-0248

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 9.0 before p700 IBM Security Guardium versions 10.0 before p100

Description The issue allows man-in-the-middle attackers to obtain sensitive query-string information from SSL sessions via unspecified vectors.

Recommendations For IBM Security Guardium version 9.0, update to p700 or later. For IBM Security Guardium version 10.0, update to p100 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0248

Affected Products

Ibm Security Guardium

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-0248 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21982031 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0248 · Vendor Advisory
• http://securityfocus.com/bid/93137 · Note