CVE-2022-43907 - IBM Security Guardium command execution

Back Back to CVE browser

HIGH

IBM Security Guardium command execution

Published Aug 27, 2023

8.8

HIGH

CVSS 3.1

EPSS 1.32%

Description

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901.

Affected products

Vendor IBM Product Security Guardium Default
unaffected
- Version
  11.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Security Guardium

unaffected

Version	Status	Constraints
11.4	affected	-

Vendor IBM Product Security Guardium Default
n/a
- Version
  11.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Security Guardium

n/a

Version	Status	Constraints
11.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46877
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/240901
VDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7028511
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46877		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/240901		VDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7028511		vendor-advisoryPatchVendor Advisory