cbcvebase.
CVE-2024-49817
published 2024-12-17

CVE-2024-49817: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged…

PriorityP419medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
EPSS
0.19%
8.8th percentile
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.

Affected

5 ranges
VendorProductVersion rangeFixed in
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.