CVE-2023-25924: IBM Security Key Lifecycle Manager improper authorization
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.
Other sources
IBM Security Guardium Key Lifecycle Manager could allow an authenticated user to perform actions that they should not have access to due to improper authorization.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-25924?
CVE-2023-25924 is a vulnerability in IBM Security Guardium Key Lifecycle Manager that could allow an authenticated user to perform unauthorized actions.
What is the severity level of CVE-2023-25924?
CVE-2023-25924 has a severity level of high (8.8).
Which versions of IBM Security Guardium Key Lifecycle Manager are affected by CVE-2023-25924?
Versions 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 of IBM Security Guardium Key Lifecycle Manager are affected by CVE-2023-25924.
How can an authenticated user exploit CVE-2023-25924?
An authenticated user can exploit CVE-2023-25924 to perform actions that should not be accessible to them due to improper authorization.
Where can I find more information about CVE-2023-25924?
You can find more information about CVE-2023-25924 on the IBM X-Force ID 247630 and the IBM Support page.