CVE-2020-4990

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.2

Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is a result of a SQL injection vulnerability.

Recommendations For IBM Security Guardium version 11.2, consider restricting access to the database to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the ability to send specially crafted SQL statements to prevent potential attacks on the back-end database. At the moment, there is no information about a newer version that contains a fix for this vulnerability.