Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm security guardium key lifecycle manager vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-38984
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 212793.
Ibm Security Guardium Key Lifecycle ManagerIbm Security Guardium Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38985
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle ManagerIbm Security Guardium Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38972
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle ManagerIbm Security Guardium Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38973
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle ManagerIbm Security Guardium Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager
NA
CVE-2023-25687
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25686
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25924
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25923
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an malicious user to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25688
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote malicious user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on ...
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25684
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM...
Ibm Security Key Lifecycle Manager 3.0Ibm Security Key Lifecycle Manager 3.0.1Ibm Security Key Lifecycle Manager 4.0Ibm Security Key Lifecycle Manager 4.1.1Ibm Security Key Lifecycle Manager 4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook