CVE-2020-4191: Medium severity ibm infosphere guardium z/os vulnerability
Published Jun 2, 2020
·Updated
IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174852.
Other sources
IBM Security Guardium uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected Software
6 affected components
IBM Security Guardium<=10.5
IBM Security Guardium<=10.6
IBM Security Guardium<=11.0
IBM Security Guardium<=11.1
IBM Security Guardium=11.1
Linux Linux kernel
Event History
Jun 2, 2020
CVE Published
via IBM·12:00 AM
Jun 4, 2020
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation requires local access and high privileges. No user interaction is required.
2
What is the expected impact if the issue is exploited?
The reported impact is disclosure of highly sensitive information through decryption. The CVSS vector indicates high confidentiality impact, with no integrity or availability impact.