|
196911
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_quality_manager rhapsody_design_manager rational_engineering_lifecycle_manager rhapsody_model_manager engineering_workflow_management collaborative_lifecycle_management eng…
|
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vuln…
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2020-4547
|
2024-11-21 14:32 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196912
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_quality_manager rhapsody_design_manager rational_engineering_lifecycle_manager rhapsody_model_manager engineering_workflow_management collaborative_lifecycle_management eng…
|
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4524
|
2024-11-21 14:32 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196913
|
4.3 |
MEDIUM
Network
|
ibm
|
security_guardium
|
IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-4189
|
2024-11-21 14:32 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196914
|
4.4 |
MEDIUM
Local
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-4604
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196915
|
4.4 |
MEDIUM
Local
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184836.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-4602
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196916
|
5.3 |
MEDIUM
Network
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4600
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196917
|
5.3 |
MEDIUM
Network
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4599
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196918
|
4.3 |
MEDIUM
Network
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user o…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-4597
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196919
|
7.5 |
HIGH
Network
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812.
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2020-4596
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196920
|
7.5 |
HIGH
Network
|
ibm
|
security_guardium_insights
|
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819.
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2020-4595
|
2024-11-21 14:32 |
2021-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|