CVE-2020-4190: Medium severity ibm infosphere guardium z/os vulnerability
IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851.
Other sources
IBM Security Guardium contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4190?
CVE-2020-4190 has a high severity level due to the presence of hard-coded credentials which can lead to unauthorized access.
How do I fix CVE-2020-4190?
To fix CVE-2020-4190, upgrade IBM Security Guardium to the latest version where the hard-coded credentials issue is resolved.
What versions of IBM Security Guardium are affected by CVE-2020-4190?
CVE-2020-4190 affects IBM Security Guardium versions 10.6, 11.0, and 11.1.
What is the impact of CVE-2020-4190 on IBM Security Guardium?
The impact of CVE-2020-4190 includes potential unauthorized access to sensitive data and the risk of data integrity breaches.
Is there a workaround for CVE-2020-4190 before applying patches?
There are no official workarounds for CVE-2020-4190; the recommended action is to upgrade to a patched version.