CVE-2019-4695: Medium severity ibm security guardium data encryption vulnerability

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2019-4695.

Q: What is the severity level of CVE-2019-4695?

CVE-2019-4695 has a severity level of medium.

Q: What is the affected software?

The affected software is IBM Guardium Data Encryption (GDE) version 3.0.0.2.

Q: How can an attacker exploit this vulnerability?

An attacker can exploit CVE-2019-4695 by reading web pages stored locally on the system.

Q: Are there any references or resources for more information about this vulnerability?

Yes, you can find more information about CVE-2019-4695 at the following references: [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/171926) and [IBM Support](https://www.ibm.com/support/pages/node/6320817).

Published Aug 11, 2020

Updated

IBM Guardium Data Encryption (GDE) allows web pages to be stored locally which can be read by another user on the system.

Other sources

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.

Affected Software

2 affected components

IBM Guardium Data Encryption=3.0.0.2

IBM GDE<=3.0.0.2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6320817

Event History

Aug 11, 2020

CVE Published

via IBM·12:00 AM

Aug 26, 2020

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6320817

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2019-4695.

What is the severity level of CVE-2019-4695?