Описание
IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
EPSS
6.5 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
Связанные уязвимости
IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119.
Уязвимость менеджера ключей Guardium Cloud Key Manager (CKM) программного средства шифрования данных IBM Guardium Data Encryption, позволяющая нарушителю выполнить произвольный код
EPSS
6.5 Medium
CVSS3
9.8 Critical
CVSS3