CPE Details
IBM Infosphere Guardium 7.00
7.00
2012-02-13
14h24 +00:00
14h24 +00:00
2012-02-13
14h24 +00:00
14h24 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:ibm:infosphere_guardium:7.00:*:*:*:*:*:*:*
Informations
Vendor
ibmProduct
infosphere_guardiumVersion
7.00Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294. | 5.4 |
Medium |
||
| Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. | 6.8 |
|||
| The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network. | 5 |
