IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/93825 | vdb entry |
http://www-01.ibm.com/support/docview.wss?uid=swg21990229 | patch vendor advisory |