7.5
CVE-2023-25923
- EPSS 0.04%
- Published 21.03.2023 16:15:12
- Last modified 21.11.2024 07:50:25
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Security Key Lifecycle Manager Version3.0
Ibm ≫ Security Key Lifecycle Manager Version3.0.1
Ibm ≫ Security Key Lifecycle Manager Version4.0
Ibm ≫ Security Key Lifecycle Manager Version4.1
Ibm ≫ Security Key Lifecycle Manager Version4.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.11 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| psirt@us.ibm.com | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.