Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm security guardium key lifecycle manager vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2021-38984
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 212793.
Ibm Security Guardium Key Lifecycle Manager
Ibm Security Guardium Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38972
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle Manager
Ibm Security Guardium Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38973
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle Manager
Ibm Security Guardium Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager
4
CVSSv2
CVE-2021-38985
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Ibm Security Guardium Key Lifecycle Manager
Ibm Security Guardium Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager
NA
CVE-2023-25687
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25686
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25924
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25923
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an malicious user to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25688
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote malicious user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on ...
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
NA
CVE-2023-25684
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM...
Ibm Security Key Lifecycle Manager 3.0
Ibm Security Key Lifecycle Manager 3.0.1
Ibm Security Key Lifecycle Manager 4.0
Ibm Security Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager 4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »