CVE-2021-20428: Medium severity IBM Security Guardium vulnerability
IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-20428?
CVE-2021-20428 is a vulnerability in IBM Security Guardium 11.2 that could allow a remote attacker to obtain sensitive information.
How does CVE-2021-20428 exploit work?
CVE-2021-20428 exploits a weakness in IBM Security Guardium 11.2 that allows a detailed technical error message to be returned in the browser, which can then be used by an attacker to gather sensitive information for further attacks.
What is the severity level of CVE-2021-20428?
CVE-2021-20428 has a severity level of 5.3 (medium).
Is IBM Security Guardium 11.2 the only affected version?
No, other versions of IBM Security Guardium (10.5, 10.6, 11.0, 11.1, 11.3) may also be affected.
How can I protect my system from CVE-2021-20428?
To protect your system from CVE-2021-20428, it is recommended to apply the necessary security updates provided by IBM Security Guardium.