CVE-2023-25921: IBM Security Guardium Key Lifecycle Manager file upload
First published: Thu Mar 09 2023(Updated: )
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Security Key Lifecycle Manager | <=3.0 | |
| Ibm Security Key Lifecycle Manager | <=3.0.1 | |
| IBM Security Guardium Key Lifecycle Manager | <=4.0 | |
| IBM Security Guardium Key Lifecycle Manager | <=4.1 | |
| IBM Security Guardium Key Lifecycle Manager | <=4.1.1 | |
| All of | ||
| IBM Security Guardium Key Lifecycle Manager | >=3.0.0<4.1.1.7 | |
| Any of | ||
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/title
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/ibm
- canonical/ibm security key lifecycle manager
- version/ibm security key lifecycle manager/3.0
- version/ibm security key lifecycle manager/3.0.1
- canonical/ibm security guardium key lifecycle manager
- version/ibm security guardium key lifecycle manager/4.0
- version/ibm security guardium key lifecycle manager/4.1
- version/ibm security guardium key lifecycle manager/4.1.1
- version/ibm security guardium key lifecycle manager/3.0.0
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows