CVE-2020-4186: Infoleak
IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804.
Other sources
IBM Security Guardium could disclose sensitive information on the login page that could aid in further attacks against the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
Which deployments are affected?
IBM Security Guardium versions 10.5, 10.6, and 11.1 are identified as affected.
Does an attacker need credentials or user interaction to exploit this issue?
No. The CVSS vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected impact?
The issue can disclose sensitive information through the login page, which may assist further attacks. The listed CVSS impact is limited to confidentiality; integrity and availability are not affected.
What should teams do to remediate it?
Apply the available patch for IBM Security Guardium.