8.5
High
CVE-2023-25925 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated…
Description
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 247632.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Guardium Key Lifecycle Manager | Versions not published | |
| security_guardium_key_lifecycle_manager 4.1 | 4.1.0 → 4.1.1 | No fix stated |
| security_guardium_key_lifecycle_manager | 4.0 | No fix stated |
| security_guardium_key_lifecycle_manager 3.0 | 3.0 → 3.0.1 | No fix stated |
Other CVEs of Security Guardium Key Lifecycle Manager
The 15 CVEs of Security Guardium Key Lifecycle Manager →
CVE-2024-49816
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log…
4.9
Medium
CVE-2024-49820
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
3.7
Low
CVE-2024-49819
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
4.1
Medium
CVE-2024-49818
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain…
4.3
Medium