CVE-2020-4188: Medium severity ibm infosphere guardium z/os vulnerability
Published Jun 2, 2020
·Updated
IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force ID: 174807.
Other sources
IBM Security Guardium may use insufficiently random numbers or values in a security context that depends on unpredictable numbers.
Affected Software
6 affected components
IBM Security Guardium=10.6
IBM Security Guardium=11.1
IBM Security Guardium<=10.5
IBM Security Guardium<=10.6
IBM Security Guardium<=11.0
IBM Security Guardium<=11.1
Event History
Jun 2, 2020
CVE Published
via IBM·12:00 AM
Jun 23, 2020
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
The affected product versions identified are IBM Security Guardium 10.6 and 11.1.
2
Can this be exploited remotely without credentials or user interaction?
The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the expected impact if exploited?
The listed CVSS metrics indicate low confidentiality impact, with no integrity or availability impact.