PT-2020-11033 · Ibm · Ibm Security Guardium Data Encryption

Published 2020-08-26 · Updated 2020-08-27 · CVE-2019-4699

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption (GDE) version 3.0.0.2

Description The issue concerns an error message generated by the software that includes sensitive information about its environment, users, or associated data.

Recommendations For version 3.0.0.2, consider implementing measures to restrict access to error messages and sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2019-4699

Affected Products

Ibm Security Guardium Data Encryption

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/171931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4699 · Security Note
• https://ibm.com/support/pages/node/6320835 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4699 · Vendor Advisory