CVE-2021-39020

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption (GDE) versions 4.0.0.7 and lower

Description The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties access the URLs via server logs, referrer headers, or browser history.

Recommendations For IBM Guardium Data Encryption (GDE) versions 4.0.0.7 and lower, consider restricting access to server logs and referrer headers to minimize the risk of exploitation. As a temporary workaround, avoid using sensitive information in URL parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.