CVE-2017-1267

High

Published: 21/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Guardium versions 10.0 and 10.1 process patches, image backups, and other updates without sufficiently verifying the origin and integrity of the code.

Risk Assessment

Insufficient verification may lead to the introduction of malicious code, posing a threat to the security of the organization's data and systems.

Recommendation

It is recommended to implement additional verification mechanisms for all updates and to monitor the system for potential threats.

Other vulnerabilities in IBM Security Guardium 10.0 and 10.1

CVE-2017-1269Critical
IBM Security Guardium versions 10.0 and 10.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Original NVD description (English source)

IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742.