Security Guardium
CVE-2020-4689
MEDIUM
Severity by source
AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696.
AnalysisAI
IBM Security Guardium 11.2 is vulnerable to CVS Injection. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-1236. IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696. Affected products include: Ibm Security Guardium.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Security Guardium
View allIBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. Rate
IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. Rated critical severity (CVSS 9.8), this vulnerabili
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier fo
IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for i
IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force
IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for i
IBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or cryptographic key, which it use
IBM Security Guardium 10.0 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vulnerability is remotel
IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. Rated high severity (CVSS 8.8), t
IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary comman
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration
IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. Rate
Same technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today