CVE-2021-20428: 
IBM Guardium Appliance vulnerability analysis and mitigation

IBM Security Guardium 11.2 contains a vulnerability (CVE-2021-20428) that could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. The vulnerability was disclosed on May 21, 2021, and affects IBM Security Guardium versions 11.2 and 11.3 (IBM Security).

The vulnerability has a CVSS Base score of 5.3 and a CVSS Vector of (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The vulnerability is characterized by insufficient protection of error messages that could reveal sensitive technical information through the browser interface. This vulnerability requires no user interaction or privileges to exploit, and can be accessed remotely through the network (IBM Security).

When exploited, this vulnerability allows attackers to obtain sensitive technical information from error messages displayed in the browser. This leaked information could potentially be used as reconnaissance for further attacks against the system. The impact is primarily limited to confidentiality, with no direct impact on system integrity or availability (IBM Security).

IBM has released security fixes for affected versions of Security Guardium. Users should update to the latest patch levels available through IBM Fix Central. For version 11.2, the fix is available via SqlGuard11.0p250Bundle_Jul-14-2021 (IBM Security).