CVE-2020-4189: Medium severity ibm infosphere guardium z/os vulnerability
Published Jan 19, 2021
·Updated
IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850.
Other sources
IBM Security Guardium discloses sensitive information in the response headers that could be used in further attacks against the system.
Affected Software
7 affected components
IBM Security Guardium<=10.5
IBM Security Guardium<=10.6
IBM Security Guardium<=11.0
IBM Security Guardium<=11.1
IBM Security Guardium<=11.2
IBM Security Guardium=11.2
Linux Linux kernel
Remediation
Patch Available
Event History
Jan 19, 2021
CVE Published
via IBM·12:00 AM
Jan 27, 2021
CVE Published
via MITRE·04:35 PM
Data Sourced
via MITRE·04:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that network access and low privileges are required. No user interaction is required, and the attack complexity is low.
2
What is the security impact if exploited?
The issue can disclose sensitive information through response headers, with a low confidentiality impact. The provided CVSS data indicates no integrity or availability impact.
3
Is a fix available?
Yes. A patch is available from IBM for IBM Security Guardium 11.2.