IBM Security Guardium Data Encryption Information Disclosure Vulnerability (CNVD-2023-66730)

IBM Security Guardium Data Encryption is a software from International Business Machines (IBM) that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files, applications and containers. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) ) version 1.10.3, which originates from a detailed technical error message being returned in a browser, and can be exploited by an attacker to obtain sensitive information.