Skip to content
OpenAdvisories
Medium WID-SEC-2025-1155 3 CVEs

IBM Security Guardium: Mehrere Schwachstellen

Published May 27, 2025 · Updated May 27, 2025 · de-DE

Vendor: IBM Product: Security Guardium Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um Informationen offenzulegen.

Product

IBM Security Guardium ist eine Lösung für die Überwachung und Auditierung des Datenzugriffs.

Vulnerabilities 3

  • Medium 4.9
    CVE-2025-25029

    IBM Security Guardium information disclosure

    IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.

    IBM Security Guardium
  • Medium 4.3
    CVE-2025-25025

    IBM Security Guardium information disclosure

    IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

    IBM Security Guardium
  • Medium 4.3
    CVE-2025-25026

    IBM Security Guardium information disclosure

    IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.

    IBM Security Guardium

Revision history

  1. #1

    Initiale Fassung

References