CVE-2017-1258

Published: Jul 5, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685

Affected (4)

Products: Ibm: Security Guardium

Ibm

1 product

Security Guardium

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium	Version 10.0.1
Ibm Security Guardium	Version 10.0
Ibm Security Guardium	Version 10.1.2
Ibm Security Guardium	Version 10.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22004309

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/99377

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124685

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22004309

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/99377

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124685

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.