CVE-2021-39078: Medium severity IBM Security Guardium vulnerability
Published Apr 15, 2022
·Updated
IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589.
Other sources
IBM Security Guardium stores user credentials in plain clear text which can be read by a local privileged user.
— IBM
Affected Software
9 affected components
IBM Security Guardium<=10.5
IBM Security Guardium<=10.6
IBM Security Guardium<=11.0
IBM Security Guardium<=11.1
IBM Security Guardium<=11.3
IBM Security Guardium<=11.2
IBM Security Guardium<=11.4
IBM Security Guardium=10.5
Linux Linux kernel
Event History
Apr 15, 2022
CVE Published
via IBM·12:00 AM
Apr 19, 2022
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for IBM Security Guardium storing user credentials in plain clear text?
The vulnerability ID is CVE-2021-39078.
2
What is the severity rating of CVE-2021-39078?
The severity rating of CVE-2021-39078 is medium (4.4).
3
How does IBM Security Guardium store user credentials?
IBM Security Guardium stores user credentials in plain clear text.
4
Who can read the user credentials stored by IBM Security Guardium?
A local privileged user can read the user credentials stored by IBM Security Guardium.
5
How can I fix the vulnerability in IBM Security Guardium?
To fix the vulnerability in IBM Security Guardium, update to a version that does not store user credentials in plain clear text and restrict access to privileged users.