CVE-2026-78537: IBM Guardium Key Lifecycle Manager is affected by a security vulnerability
Published Nov 8, 2026
·Updated
IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm.
Event History
Nov 8, 2026
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
A local attacker can exploit it. The provided information does not indicate that network access, authentication, or user interaction is required.
2
Which product versions are affected?
IBM Guardium Key Lifecycle Manager versions 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 are identified as affected.
3
What is the potential impact?
An attacker may obtain sensitive information because the affected product uses a weak cryptographic algorithm. The supplied severity vector indicates high confidentiality impact, low integrity impact, and no availability impact.