CVE-2023-47702

published 2023-12-20

CVE-2023-47702: IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view modify files on the system. IBM X-Force ID: 271196.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_guardium_key_lifecycle_manager	—	—
ibm	security_guardium_key_lifecycle_manager	>= 4.2.0 < 4.2.0.2	4.2.0.2

CWE-22