Information disclosure in IBM Security Guardium - CVE-2017-1272
Published: December 11, 2018 / Updated: December 18, 2018
Vulnerability identifier: #VU16598
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-1272
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to the application stores sensitive information in URL parameters. A remote attacker can gain access to potentially sensitive information if unauthorized parties have access to the URLs via server logs, referrer header or browser history.
Affected software
IBM Security Guardium
How to mitigate CVE-2017-1272
Install update from vendor's website.