CVE-2016-0240: ibm security_guardium_database_activity_monitor 7PK - Security Features

Vulnerability summary

CVE-2016-0240 is a medium (CVSS 4.3) 7PK - Security Features vulnerability in ibm security_guardium_database_activity_monitor. EPSS estimates a 1.03% chance of exploitation in the next 30 days, higher than 63.3% of scored vulnerabilities.

Timeline

1. 22-10-2016
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.