PT-2022-10844
CVE-2021-39020
·
تاريخ النشر
2022-05-05
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Guardium Data Encryption (GDE) versions 4.0.0.7 and lower
Description
The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties access the URLs via server logs, referrer headers, or browser history.
Recommendations
For IBM Guardium Data Encryption (GDE) versions 4.0.0.7 and lower, consider restricting access to server logs and referrer headers to minimize the risk of exploitation. As a temporary workaround, avoid using sensitive information in URL parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾