Vulnerabilities > IBM > Security Guardium Data Encrpytion

DATE CVE VULNERABILITY TITLE RISK
2021-01-13 CVE-2019-4702 Incorrect Permission Assignment for Critical Resource vulnerability in IBM Security Guardium Data Encrpytion 3.0.0.2
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
network
low complexity
ibm CWE-732
8.1
2021-01-13 CVE-2019-4687 Cleartext Storage of Sensitive Information vulnerability in IBM Security Guardium Data Encrpytion 3.0.0.2
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters.
network
low complexity
ibm CWE-312
5.3
2021-01-13 CVE-2019-4160 Inadequate Encryption Strength vulnerability in IBM Security Guardium Data Encrpytion 3.0.0.2
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5