PT-2017-7598

CVE-2016-0238

·

Published

2017-07-05

·

Updated

2017-07-11

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 9.0 through 10.1
Description The issue allows an attacker to obtain sensitive information using man-in-the-middle techniques because sensitive data is transmitted in cleartext in the query of the request.
Recommendations For IBM Security Guardium versions 9.0 through 10.1, consider implementing encryption for sensitive data transmitted in the query of the request to prevent interception by an attacker.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾