Ibm

Security Guardium Key Lifecycle Manager

29 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-47705

  • EPSS 0.06%
  • Published 20.12.2023 02:15:44
  • Last modified 21.11.2024 08:30:42

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228.

5.3

CVE-2023-47703

  • EPSS 0.05%
  • Published 20.12.2023 02:15:44
  • Last modified 21.11.2024 08:30:42

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. ...

9.1

CVE-2023-47702

  • EPSS 0.06%
  • Published 20.12.2023 02:15:43
  • Last modified 21.11.2024 08:30:42

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view modify files on the system. IBM...

7.5

CVE-2023-47704

  • EPSS 0.04%
  • Published 20.12.2023 01:15:07
  • Last modified 21.11.2024 08:30:42

IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.

8.8

CVE-2023-47706

  • EPSS 0.04%
  • Published 20.12.2023 01:15:07
  • Last modified 21.11.2024 08:30:42

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341.

5.3

CVE-2021-38980

  • EPSS 0.17%
  • Published 23.11.2021 20:15:11
  • Last modified 21.11.2024 06:18:20

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information...

7.5

CVE-2021-38984

  • EPSS 0.1%
  • Published 15.11.2021 16:15:10
  • Last modified 21.11.2024 06:18:21

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793.

7.5

CVE-2021-38983

  • EPSS 0.1%
  • Published 15.11.2021 16:15:10
  • Last modified 21.11.2024 06:18:21

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792.

5.4

CVE-2021-38982

  • EPSS 0.22%
  • Published 15.11.2021 16:15:10
  • Last modified 21.11.2024 06:18:21

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti...

5.3

CVE-2021-38981

  • EPSS 0.12%
  • Published 15.11.2021 16:15:10
  • Last modified 21.11.2024 06:18:20

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the ...