Wiz
Vulnerability DatabaseCVE-2024-49336

CVE-2024-49336: 
IBM Guardium Appliance vulnerability analysis and mitigation

Overview

IBM Security Guardium versions 11.5 and 12.0 are vulnerable to server-side request forgery (SSRF). This vulnerability (CVE-2024-49336) was disclosed on December 19, 2024, and allows an authenticated attacker to send unauthorized requests from the system (IBM Advisory).

Technical details

The vulnerability is classified as a Server-Side Request Forgery (SSRF) issue (CWE-918). It has received a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicating network accessibility, low attack complexity, and no user interaction required (NVD).

Impact

If exploited, this vulnerability could allow an authenticated attacker to perform network enumeration and potentially facilitate other attacks through unauthorized requests sent from the system (IBM Advisory).

Mitigation and workarounds

IBM has released security fixes for affected versions. For version 11.5, the fix is available in SqlGuard11.0p555BundleDec-04-2024, and for version 12.0, in SqlGuard12.0p35BundleJan-28-2025. IBM encourages customers to update their systems promptly. No workarounds have been identified (IBM Advisory).

Community reactions

The vulnerability was reported to IBM by Mohamed Saleh from the VAPT team of Asiacell Communications PJSC (IBM Advisory).

Additional resources

Source: This report was generated using AI

Related IBM Guardium Appliance vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-36020HIGH7.5
  • IBM Guardium ApplianceIBM Guardium Appliance
  • cpe:2.3:a:ibm:security_guardium
NoNoAug 06, 2025
CVE-2025-3473MEDIUM6.7
  • IBM Guardium ApplianceIBM Guardium Appliance
  • cpe:2.3:a:ibm:security_guardium
NoNoJun 11, 2025
CVE-2025-25029MEDIUM6.5
  • IBM Guardium ApplianceIBM Guardium Appliance
  • cpe:2.3:a:ibm:security_guardium
NoNoMay 28, 2025
CVE-2025-25025MEDIUM5.3
  • IBM Guardium ApplianceIBM Guardium Appliance
  • cpe:2.3:a:ibm:security_guardium
NoNoMay 28, 2025
CVE-2025-25026MEDIUM4.3
  • IBM Guardium ApplianceIBM Guardium Appliance
  • cpe:2.3:a:ibm:security_guardium
NoNoMay 28, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo