CVE-2023-25686

Опубликовано: 21 мар. 2023

Источник: nvd

CVSS3: 6.2

CVSS3: 5.5

EPSS Низкий

Описание

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/247601
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6962729
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247601
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6962729
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00023

Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

GHSA-gqcm-cc6q-qvph

CVSS3: 5.5

github

почти 3 года назад

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.

EPSS

Процентиль: 6%

0.00023

Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-522