Vulnerability Bulletins |
IBM Security Bulletin: Use of Hard-coded Cryptographic Key vulenrability affects IBM Security Guardium Database Activity Monitor (CVE-2016-0235) |
|
| Affected software | IBM |
|
IBM Security Guardium Database Activity Monitor uses a hard-coded password for the which is available to the administrator or a user with root access. This password could be used across other GRUB systems.CVE(s): CVE-2016-0235Affected product(s) and affected version(s):IBM Security Guardium Database Activity Monitor V10Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21981748X-Force More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-use-of-hard-coded-cryptographic-key-vulenrability-affects-ibm-security-guardium-database-activity-monitor-cve-2016-0235/ |
|