Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-1375 1 Ibm 1 Security Guardium Big Data Intelligence 2024-11-21 N/A
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776.
CVE-2018-1369 1 Ibm 1 Security Guardium Big Data Intelligence 2024-11-21 N/A
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767.
CVE-2017-1768 1 Ibm 1 Security Guardium Big Data Intelligence 2024-11-21 N/A
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471.