Medium · 4.4 CVE-2022-39166 EUVD-2022-41711GHSA-r65g-w5g9-54rf

IBM Security Guardium information disclosure

Published Dec 20, 2022 · Updated Apr 15, 2025 · Assigned by ibm

Vendor: IBM Product: Security Guardium

Description

IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Guardium	11.4	—

Advisories 1

WID-SEC-2022-2376 IBM Security Guardium: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 20, 2022

References

https://www.ibm.com/support/pages/node/6848317 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/235405 vdb-entry