Michał Brzezicki

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium versions 11.3 through 11.5 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. **Recommendations** For versions 11.3 through 11.5, consider disabling the Web UI functionality until a patch is available to prevent the embedding of arbitrary JavaScript code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium versions 11.3 through 11.5 **Description** This issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. The vulnerability enables the embedding of malicious code, which could compromise the security of the system. **Recommendations** For IBM Security Guardium versions 11.3 through 11.5, consider disabling the Web UI functionality until a patch is available to prevent potential exploitation. Restrict access to the Web UI to minimize the risk of credentials disclosure.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium versions 11.3 through 11.5 **Description** The issue allows an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. **Recommendations** For versions 11.3 through 11.5, consider restricting access to the HTTP request functionality until a patch is available. As a temporary workaround, consider implementing additional authentication measures to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.