CVE-2023-25687

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/247602 · VDB Entry
• ibm.com/support/pages/node/6962729 · Patch

security key lifecycle manager のその他の脆弱性

• CVE-2023-25924高 8.8IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they s…
• CVE-2023-25688中 5.3IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the syst…
• CVE-2023-25684緊急 9.8IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send spe…
• CVE-2023-25923高 7.5IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a …
• CVE-2023-25686中 5.5IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by…