CVE-2017-1264

Published: Jul 5, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739.

Affected (4)

Products: Ibm: Security Guardium

Ibm

1 product

Security Guardium

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium	Version 10.0.1
Ibm Security Guardium	Version 10.0
Ibm Security Guardium	Version 10.1.2
Ibm Security Guardium	Version 10.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22004425

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/99369

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124739

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22004425

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/99369

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124739

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.