CVE-2017-1757: SQL Injection

Published Dec 20, 2017

Updated

IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.

Affected Software

5 affected components

IBM Security Guardium=10.0

IBM Security Guardium=10.0.1

IBM Security Guardium=10.1.0

IBM Security Guardium=10.1.2

IBM Security Guardium=10.1.3

Event History

Dec 20, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1757?

CVE-2017-1757 is considered a critical vulnerability due to its potential impact on database security.

How do I fix CVE-2017-1757?

To fix CVE-2017-1757, it is recommended to apply the latest security patches provided by IBM for the affected versions of Security Guardium.

What types of attacks can exploit CVE-2017-1757?

CVE-2017-1757 can be exploited through SQL injection attacks, allowing attackers to manipulate the back-end database.

What systems are affected by CVE-2017-1757?

CVE-2017-1757 affects IBM Security Guardium versions 10.0, 10.0.1, 10.1.0, 10.1.2, and 10.1.3.

Can CVE-2017-1757 lead to data loss?

Yes, CVE-2017-1757 can lead to data loss since it allows attackers to delete information from the back-end database.