CVE-2020-4189: 
IBM Guardium Appliance vulnerability analysis and mitigation

IBM Security Guardium 11.2 and earlier versions (10.5, 10.6, 11.0, 11.1) contain an information disclosure vulnerability identified as CVE-2020-4189. The vulnerability allows sensitive information to be exposed through response headers that could potentially be leveraged for subsequent attacks against the system (IBM Security Bulletin).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability is network accessible, requires low attack complexity, needs low privileges, requires no user interaction, has unchanged scope, and can impact confidentiality but not integrity or availability (NVD).

The vulnerability exposes sensitive information through response headers which could be utilized by attackers to conduct further attacks against the system. The impact is primarily limited to confidentiality, with no direct impact on system integrity or availability (IBM Security Bulletin).

The vulnerability requires network access and low privileges to exploit, making it relatively accessible to attackers who have basic access to the network where the IBM Security Guardium system is deployed (NVD).

IBM has released security fixes for all affected versions: 10.5, 10.6, 11.0, 11.1, and 11.2. These fixes are available through IBM Fix Central. No workarounds are available for this vulnerability, making patch installation the only mitigation option (IBM Security Bulletin).