IBM Security Guardium Big Data Intelligence CVE-2019-4307 Information Disclosure Vulnerability

Description

IBM Security Guardium Big Data Intelligence is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. IBM Security Guardium Big Data Intelligence 4.0 is vulnerable.

Technologies Affected

• IBM Security Guardium Big Data Intelligence 4.0

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Given the local nature of this issue, grant only trusted and accountable individuals access to affected computers.

Communicate sensitive information over encrypted channels.
Ensure that only encrypted channels are used for communicating sensitive information.

Updates are available. Please see the references or vendor advisory for more information.