Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2023-25925

IBM Security Guardium Key Lifecycle Manager command injection

Description

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 247632.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Security Guardium Key Lifecycle Manager

Default version status: unaffected

  • 3.0, 3.0.1, 4.0, 4.1, 4.1.1affected

References