CVE-2022-39166 MEDIUM

CVE-2022-39166: IBM Security Guardium information disclosure

Vendor Ibm

Product Security Guardium

Weakness CWE-200 · Info exposure

Published December 20, 2022

Last update April 15, 2025

CVSS base score

4.4/10

Attack vector Network

Attack complexity High

Privileges required High

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.

Key dates

December 20, 2022 CVE published

April 15, 2025 Record updated

External resources

Related vulnerabilities