CVE-2023-25687

Опубликовано: 21 мар. 2023

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/247602
VDB Entry
https://www.ibm.com/support/pages/node/6962729
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247602
VDB Entry
https://www.ibm.com/support/pages/node/6962729
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00143

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-209

CWE-532

Связанные уязвимости

GHSA-7r96-f699-x2h6