description: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.
problem types: Bypass Security
affected:
{
product: Guardium Data Encryption
vendor: IBM
versions:
status: affected, version: 4.0.0
status: affected, version: 5.0.0
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3
baseSeverity: LOW
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 2.6
temporalSeverity: LOW
userInteraction: REQUIRED
vectorString: CVSS:3.0/C:N/S:C/I:L/AC:H/UI:R/AV:N/A:N/PR:L/RL:O/RC:C/E:U
version: 3.0
]