CVE-2017-1272

LOW

IBM Security Guardium 10.0-10.5 - Exposure of Sensitive Information via URL Parameters

Title source: llm

Description

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747.

References (3)

Core 3

Core References

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/124747

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106237

Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/docview.wss?uid=ibm10731655

Scores

CVSS v3 3.7

EPSS 0.0167

EPSS Percentile 73.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (1)

ibm/security_guardium 10.0 - 10.5

Published Dec 17, 2018

Tracked Since Feb 18, 2026