CVE-2023-47705 — Improper Input Validation in IBM Security Guardium KEY Lifecycle Manager

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 72.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium KEY Lifecycle Manager
Timeline
PublishedDec 20

Description

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-vxjj-qm22-4cqm: IBM Security Guardium Key Lifecycle Manager 4↗2023-12-20
▶
CVEList
IBM Security Guardium Key Lifecycle Manager improper input validation↗2023-12-20
▶
CVE-2023-47705 — Improper Input Validation in IBM | cvebase