Skip to content
Sign in
6.5 Medium

CVE-2023-26270 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to…

Description

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119.

Affected products and versions

Product Affected versions Fixed in
Guardium Cloud Key Manager 1.10.3 No fix stated

Other CVEs of Guardium Cloud Key Manager

The 3 CVEs of Guardium Cloud Key Manager →
CVE-2023-26271 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout… 5.3 Medium CVE-2023-26272 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to… 5.3 Medium
Track this CVE