TI-2023-10962 CVE-2023-25684 · GHSA-fj4r-372v-jvm6
IBM Security Key Lifecycle Manager SQL injection
Priority MEDIUM 44
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection.
Vulnerabilities
7 records
TI-2023-10963 CVE-2023-25686 · GHSA-gqcm-cc6q-qvph
IBM Security Key Lifecycle Manager information disclosure
Priority LOW 27
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user.
TI-2023-11172 CVE-2023-25923 · GHSA-3887-7vpg-g78m
IBM Security Key Lifecycle Manager denial of service
Priority LOW 34
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization.
TI-2023-10965 CVE-2023-25688 · GHSA-p25m-6vrr-php8
IBM Security Key Lifecycle Manager information disclosure
Priority LOW 26
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system.
TI-2023-10964 CVE-2023-25687 · GHSA-7r96-f699-x2h6
IBM Security Key Lifecycle Manager information disclosure
Priority LOW 21
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files.
TI-2023-11173 CVE-2023-25924 · GHSA-7733-wh9m-x4gj
IBM Security Key Lifecycle Manager improper authorization
Priority LOW 38
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization.
TI-2023-10966 CVE-2023-25689 · GHSA-r5cq-cr9f-hpmh
IBM Security Key Lifecycle Manager information disclosure
Priority LOW 25
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system.