|
219121
|
5.3 |
MEDIUM
Network
|
ibm
|
api_connect
|
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
|
NVD-CWE-noinfo
|
CVE-2019-4600
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219122
|
8.8 |
HIGH
Network
|
ibm
|
maximo_health\ _safety_and_environment_manager maximo_for_oil_and_gas
|
After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.
|
CWE-269
Improper Privilege Management
|
CVE-2019-4546
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219123
|
7.5 |
HIGH
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 16141…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2019-4339
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219124
|
4.3 |
MEDIUM
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an H…
|
CWE-565
Reliance on Cookies without Validation and Integrity Checking
|
CVE-2019-4330
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219125
|
4.3 |
MEDIUM
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the syst…
|
NVD-CWE-noinfo
|
CVE-2019-4329
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219126
|
7.5 |
HIGH
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2019-4314
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219127
|
5.3 |
MEDIUM
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161…
|
CWE-863
Incorrect Authorization
|
CVE-2019-4311
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219128
|
5.5 |
MEDIUM
Local
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-4309
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219129
|
5.5 |
MEDIUM
Local
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2019-4307
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219130
|
6.5 |
MEDIUM
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that r…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2019-4306
|
2024-11-21 13:43 |
2019-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|