CVE-2016-0238

Опубликовано: 05 июл. 2017

Источник: nvd

CVSS3: 3.7

CVSS2: 4.3

EPSS Низкий

Описание

IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21989124
Vendor Advisory
http://www.securityfocus.com/bid/99379
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/110409
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21989124
Vendor Advisory
http://www.securityfocus.com/bid/99379
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/110409
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00222

Низкий

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-c344-cfmm-v5wj