CVE Catalog

CVE-2017-1269

Critical
Published: Translated: NVD NIST

Summary

IBM Security Guardium versions 10.0 and 10.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Risk Assessment

This vulnerability could lead to unauthorized access to data and its modification, posing a serious threat to the integrity and confidentiality of information within the organization.

Recommendation

It is recommended to upgrade to the latest version of IBM Security Guardium and implement appropriate security measures against SQL injection attacks.

Original NVD description (English source)

IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 124744

Vulnerability data from NVD (NIST) · CISA KEV · EPSS