CVE-2020-4254

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/175560 · VDB Entry
• ibm.com/support/pages/node/6348664 · Vendor Advisory

security guardium big data intelligence のその他の脆弱性

• CVE-2019-4339高 7.5IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to …
• CVE-2019-4330中 4.3IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause …
• CVE-2019-4329中 4.3IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass …
• CVE-2019-4314高 7.5IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessibl…
• CVE-2019-4311中 5.3IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used …