Ibm

Security Key Lifecycle Manager

70 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-25924

  • EPSS 0.06%
  • Veröffentlicht 22.03.2023 06:15:10
  • Zuletzt bearbeitet 21.11.2024 07:50:25

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.

5.3

CVE-2023-25688

  • EPSS 0.07%
  • Veröffentlicht 22.03.2023 06:15:10
  • Zuletzt bearbeitet 21.11.2024 07:49:56

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbit...

9.8

CVE-2023-25684

  • EPSS 0.04%
  • Veröffentlicht 21.03.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 07:49:56

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in th...

7.5

CVE-2023-25923

  • EPSS 0.04%
  • Veröffentlicht 21.03.2023 16:15:12
  • Zuletzt bearbeitet 21.11.2024 07:50:25

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.

5.5

CVE-2023-25686

  • EPSS 0.02%
  • Veröffentlicht 21.03.2023 16:15:12
  • Zuletzt bearbeitet 21.11.2024 07:49:56

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.

5.3

CVE-2023-25689

  • EPSS 0.03%
  • Veröffentlicht 21.03.2023 15:15:12
  • Zuletzt bearbeitet 21.11.2024 07:49:56

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arb...

4.3

CVE-2023-25687

  • EPSS 0.11%
  • Veröffentlicht 21.03.2023 15:15:12
  • Zuletzt bearbeitet 21.11.2024 07:49:56

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.

5.3

CVE-2021-38980

  • EPSS 0.17%
  • Veröffentlicht 23.11.2021 20:15:11
  • Zuletzt bearbeitet 21.11.2024 06:18:20

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information...

7.5

CVE-2021-38984

  • EPSS 0.1%
  • Veröffentlicht 15.11.2021 16:15:10
  • Zuletzt bearbeitet 21.11.2024 06:18:21

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793.

7.5

CVE-2021-38983

  • EPSS 0.1%
  • Veröffentlicht 15.11.2021 16:15:10
  • Zuletzt bearbeitet 21.11.2024 06:18:21

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792.