CVE-2019-4693 MEDIUM

CVE-2019-4693

Vendor Ibm
Product Security Guardium Data Encryption
Published August 26, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.0/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/C:H/UI:N/A:N/AV:L/S:C/AC:L/I:N/PR:H/RC:C/RL:O/E:U

What the vulnerability does

01Description

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831.

Key dates

02Disclosure timeline

August 26, 2020 CVE published
September 17, 2024 Record updated