CVE-2022-39166: 
IBM Guardium Appliance vulnerability analysis and mitigation

IBM Security Guardium 11.3, 11.4, and 11.5 were affected by a vulnerability (CVE-2022-39166) that could allow a privileged user to obtain sensitive information inside of an HTTP response. The vulnerability was disclosed and addressed by IBM in late 2022 (IBM Security).

The vulnerability has a CVSS Base score of 4.4 with the following vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N. This indicates a Network attack vector with High attack complexity, requiring High privileges, no user interaction, with Unchanged scope, and potential for High confidentiality impact but no impact on integrity or availability (IBM Security).

The vulnerability could allow privileged users to access sensitive information contained within HTTP responses, potentially leading to unauthorized disclosure of confidential data (IBM Security).

IBM released security fixes for affected versions: SqlGuard11.0p380BundleFeb-17-2023 for version 11.3, SqlGuard11.0p460BundleNov-17-2022 for version 11.4, and SqlGuard11.0p520Bundle_Feb-20-2023 for version 11.5. IBM strongly encourages customers to update their systems promptly (IBM Security).