CVE-2023-26270: IBM Security Guardium Data Encryption code execution
First published: Tue Apr 25 2023(Updated: )
IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM 1 | <=1.10.3 and lower | |
| IBM Guardium for Cloud Key Management | <=1.10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-26270?
CVE-2023-26270 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2023-26270?
To address CVE-2023-26270, upgrade IBM Guardium Cloud Key Manager to version 1.10.4 or later.
What types of systems are affected by CVE-2023-26270?
CVE-2023-26270 affects IBM Guardium Cloud Key Manager versions 1.10.3 and prior.
Can CVE-2023-26270 be exploited remotely?
Yes, CVE-2023-26270 can be exploited by remote attackers through specially crafted requests.
What kind of attack does CVE-2023-26270 enable?
CVE-2023-26270 enables remote attackers to execute arbitrary code on the affected systems.
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- agent/title
- agent/remedy
- agent/weakness
- agent/severity
- agent/description
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- vendor/ibm
- canonical/ibm 1
- version/ibm 1/1.10.3 and lower
- canonical/ibm guardium for cloud key management
- version/ibm guardium for cloud key management/1.10.3