IBM Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Lack or Misconfiguration of Browser Security Header (CVE-2017-1600)

IBM Security Guardium Database Activity Monitor is vulnerable to cross-site scripting. IBM Security Guardium Database Activity Monitor has fixed this vulenrability

CVE(s): CVE-2017-1600

Affected product(s) and affected version(s):

IBM Security Guardium Database Activity Monitor V10.0, 10.0.1, 10.1, 10.1.2, 10.1.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2D3vT3k
X-Force Database: http://ift.tt/2oMdvZU

The post IBM Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Lack or Misconfiguration of Browser Security Header (CVE-2017-1600) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2D15zH7