Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Guardium Cloud Key Manager — ibm.com/support/pages/node/6995161 Clear all filters
TI-2023-11432 CVE-2023-26270 · GHSA-f678-rc5p-fg26

IBM Security Guardium Data Encryption code execution

Priority MEDIUM 49

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00698 Published 2023-08-28 No fix listed CWE-79
TI-2023-11433 CVE-2023-26271 · GHSA-2x6p-vp7x-p4wg

IBM Security Guardium Data Encryption information disclosure

Priority LOW 39

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00475 Published 2023-08-28 No fix listed CWE-307
TI-2023-11434 CVE-2023-26272 · GHSA-7wjq-xmjj-rjjm

IBM Security Guardium Data Encryption information disclosure

Priority LOW 30

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00455 Published 2023-08-28 No fix listed CWE-209