IBM Security Guardium SQL Injection Vulnerability (CNVD-2023-20081)

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management, and streamlined audit process construction.IBM Security Guardium Key Lifecycle Manager is vulnerable to SQL injection, which stems from the application’s lack of validation of externally entered SQL statements. An attacker could use the vulnerability to execute illegal SQL commands to steal sensitive database data.