CVEvulnerability
CVE-2017-1264
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-07-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739.
Affected configurations
• ibm security guardium 10.0
• ibm security guardium 10.0.1
• ibm security guardium 10.1
• ibm security guardium 10.1.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22004425 Vendor Advisory
- http://www.securityfocus.com/bid/99369 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/124739 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22004425 Vendor Advisory
- http://www.securityfocus.com/bid/99369 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/124739 Vendor Advisory