PT-2022-9940 · Ibm · Ibm Security Guardium Insights

Published 2022-01-26 · Updated 2023-08-08 · CVE-2021-29846

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Insights version 3.0

Description The issue allows an authenticated user to obtain sensitive information due to insufficient session expiration.

Recommendations For IBM Security Guardium Insights version 3.0, consider implementing stricter session expiration policies to minimize the risk of sensitive information disclosure. As a temporary workaround, restrict access to sensitive data for authenticated users until a more permanent solution is available.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2021-29846

Affected Products

Ibm Security Guardium Insights

References · 5

• https://ibm.com/support/pages/node/6550866 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29846 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29846 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/205256 · Vendor Advisory
• https://t.me/cibsecurity/36325 · Telegram Post