CVE-2021-39077
03.11.2022, 20:15
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | security_guardium | 11.0 ≤ 𝑥 ≤ 11.4 |
| ibm | security_guardium | 10.5 |
| ibm | security_guardium | 10.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-319 - Cleartext Transmission of Sensitive InformationThe software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
- CWE-312 - Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.