First published: Mon Dec 18 2017(Updated: )
IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM InfoSphere Guardium z/OS | =10.0 | |
IBM InfoSphere Guardium z/OS | =10.0.1 | |
IBM InfoSphere Guardium z/OS | =10.1.0 | |
IBM InfoSphere Guardium z/OS | =10.1.2 | |
IBM InfoSphere Guardium z/OS | =10.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-1595 is considered a moderate severity vulnerability as it allows local attackers to access sensitive information.
To fix CVE-2017-1595, it is recommended to update IBM Security Guardium to a patched version provided by IBM.
CVE-2017-1595 affects IBM Security Guardium versions 10.0, 10.0.1, 10.1.0, 10.1.2, and 10.1.3.
Organizations using affected versions of IBM Security Guardium should be concerned about CVE-2017-1595 due to the potential exposure of sensitive information.
No, CVE-2017-1595 is not exploitable remotely as it requires local access to the system.