First published: Wed Dec 20 2017(Updated: )
IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM InfoSphere Guardium z/OS | =10.0 | |
IBM InfoSphere Guardium z/OS | =10.0.1 | |
IBM InfoSphere Guardium z/OS | =10.1.0 | |
IBM InfoSphere Guardium z/OS | =10.1.2 | |
IBM InfoSphere Guardium z/OS | =10.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-1757 is considered a critical vulnerability due to its potential impact on database security.
To fix CVE-2017-1757, it is recommended to apply the latest security patches provided by IBM for the affected versions of Security Guardium.
CVE-2017-1757 can be exploited through SQL injection attacks, allowing attackers to manipulate the back-end database.
CVE-2017-1757 affects IBM Security Guardium versions 10.0, 10.0.1, 10.1.0, 10.1.2, and 10.1.3.
Yes, CVE-2017-1757 can lead to data loss since it allows attackers to delete information from the back-end database.