CVE-2023-47704: IBM Security Guardium Key Lifecycle Manager information disclosure
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.
Other sources
IBM Security Guardium Key Lifecycle Manager contains plain text hard-coded credentials or other secrets in source code repository.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47704?
CVE-2023-47704 is classified as a high-severity vulnerability due to the presence of plain text hard-coded credentials in the source code.
How do I fix CVE-2023-47704?
To mitigate CVE-2023-47704, apply the latest patch from IBM for Security Guardium Key Lifecycle Manager.
Which versions of IBM Security Guardium Key Lifecycle Manager are affected by CVE-2023-47704?
CVE-2023-47704 affects versions up to and including 4.2.0.2 of IBM Security Guardium Key Lifecycle Manager.
Are any operating systems vulnerable to CVE-2023-47704?
CVE-2023-47704 specifically affects IBM Security Guardium Key Lifecycle Manager and does not impact the underlying operating systems like AIX, Linux, or Windows.
What kind of secrets are exposed in CVE-2023-47704?
CVE-2023-47704 exposes hard-coded credentials in plain text, which can pose significant security risks.