CVE-2024-49816

CWE-532 — Log File Information Exposure3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.1%
top 75.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium KEY Lifecycle Manager
Timeline
PublishedDec 17

Description

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/security_guardium_key_lifecycle_manager4.1, 4.1.1, 4.2.0, 4.2.1

🔴Vulnerability Details

2
GHSA
GHSA-cvm4-cfc7-c54q: IBM Security Guardium Key Lifecycle Manager 4↗2024-12-17
▶
CVEList
IBM Security Guardium Key Lifecycle Manager information disclosure↗2024-12-17
▶
CVE-2024-49816 (MEDIUM CVSS 4.4) | IBM Security Guardium Key Lifecycle | cvebase.io