CVE-2018-1377

Description

References

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/103213 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/137778 · VDB Entry

More vulnerabilities in security guardium big data intelligence

• CVE-2020-4254HIGH 7.5IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to …
• CVE-2019-4339HIGH 7.5IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to …
• CVE-2019-4330MEDIUM 4.3IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause …
• CVE-2019-4329MEDIUM 4.3IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass …
• CVE-2019-4314HIGH 7.5IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessibl…