IBM Infosphere Guardium 8.2

CPE Details

IBM Infosphere Guardium 8.2
ibm
infosphere_guardium
8.2
2012-08-30
12h27 +00:00
2012-09-21
18h22 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:infosphere_guardium:8.2:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

infosphere_guardium

Version

8.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-3341 2020-09-01 16h11 +00:00 IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294.
5.4
Medium
CVE-2012-3340 2020-09-01 16h10 +00:00 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
4.3
Medium
CVE-2012-3338 2020-09-01 16h08 +00:00 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286.
5.3
Medium
CVE-2012-3337 2020-09-01 15h41 +00:00 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.
5.3
Medium
CVE-2012-3336 2020-09-01 15h39 +00:00 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282.
8.8
High
CVE-2012-3309 2012-08-29 20h00 +00:00 Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
6.8
CVE-2012-3312 2012-08-29 20h00 +00:00 The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
5