CVE-2023-25924

published 2023-03-22

CVE-2023-25924: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	security_key_lifecycle_manager	—	—
ibm	security_key_lifecycle_manager	—	—
ibm	security_key_lifecycle_manager	—	—
ibm	security_key_lifecycle_manager	—	—
ibm	security_key_lifecycle_manager	—	—
ibm	security_key_lifecycle_manager	—	—

CWE-863