Security Guardium Key Lifecycle Manager (Ibm) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 79 known versions, newest CVE from 2024-12-17. Vendor: Ibm.

CVEs of Security Guardium Key Lifecycle Manager

CVE-2024-49820 - CVSS 3.7 (low), 2024-12-17: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure…
CVE-2024-49819 - CVSS 7.5 (high), 2024-12-17: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a…
CVE-2024-49818 - CVSS 4.3 (medium), 2024-12-17: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-49817 - CVSS 4.4 (medium), 2024-12-17: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local…
CVE-2024-49816 - CVSS 4.9 (medium), 2024-12-17: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local…
CVE-2023-25926 - CVSS 8.2 (high), 2024-02-29: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
CVE-2023-25921 - CVSS 8.8 (high), 2024-02-29: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be…
CVE-2023-25925 - CVSS 8.8 (high), 2024-02-28: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the…
CVE-2023-25922 - CVSS 8.8 (high), 2024-02-28: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be…
CVE-2023-47707 - CVSS 5.4 (medium), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2023-47705 - CVSS 4.3 (medium), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force…
CVE-2023-47703 - CVSS 5.3 (medium), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is…
CVE-2023-47702 - CVSS 9.1 (critical), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially…
CVE-2023-47706 - CVSS 8.8 (high), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341.
CVE-2023-47704 - CVSS 7.5 (high), 2023-12-20: IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.
CVE-2021-38980 - CVSS 5.3 (medium), 2021-11-23: IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive…
CVE-2021-38983 - CVSS 7.5 (high), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2021-38982 - CVSS 5.4 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2021-38981 - CVSS 5.3 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error…
CVE-2021-38984 - CVSS 7.5 (high), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2021-38976 - CVSS 6.2 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user. X-Force ID: 212781.
CVE-2021-38979 - CVSS 7.5 (high), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a…
CVE-2021-38975 - CVSS 6.5 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP…
CVE-2021-38978 - CVSS 5.9 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
CVE-2021-38974 - CVSS 6.5 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP…
CVE-2021-38977 - CVSS 4.3 (medium), 2021-11-15: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able…
CVE-2021-38985 - CVSS 4.3 (medium), 2021-11-12: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the…
CVE-2021-38973 - CVSS 2.7 (low), 2021-11-12: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the…
CVE-2021-38972 - CVSS 4.3 (medium), 2021-11-12: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the…