8.5
High
CVE-2023-25921 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer…
Description
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Guardium Key Lifecycle Manager | Versions not published | |
| security_guardium_key_lifecycle_manager 4.1 | 4.1.0 → 4.1.1 | No fix stated |
| security_guardium_key_lifecycle_manager | 4.0 | No fix stated |
| security_guardium_key_lifecycle_manager 3.0 | 3.0 → 3.0.1 | No fix stated |
Other CVEs of Security Guardium Key Lifecycle Manager
The 15 CVEs of Security Guardium Key Lifecycle Manager →
CVE-2024-49816
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log…
4.9
Medium
CVE-2024-49820
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
3.7
Low
CVE-2024-49819
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
4.1
Medium
CVE-2024-49818
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
4.3
Medium