CVE-2018-1377: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text whi...

Security readout for executives and security teams

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 may store user credentials in clear text, allowing a local user to read them. The main business risk is credential theft from systems where this product is installed, potentially enabling broader unauthorized access if those credentials are reused or privileged. Exposure appears limited to organizations running IBM Security Guardium Big Data Intelligence (SonarG) version 3.1, especially where untrusted or lower-privileged local users can access the host or appliance. Prioritize if SonarG 3.1 exists in regulated or sensitive environments, or where many administrators have local access. This is not sourced as actively exploited, but credential exposure can raise impact quickly. Mitigation focus: Check IBM advisory 22013596 and X-Force 137778 for vendor-approved remediation.; Limit local shell and administrative access to affected SonarG systems.; Rotate credentials that may have been stored on affected systems..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.