Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-01171
HistoryDec 22, 2023 - 12:00 a.m.

IBM Security Guardium Path Traversal Vulnerability (CNVD-2024-0117144)

2023-12-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
ibm security guardium
path traversal
vulnerability
key lifecycle manager
remote attacker
modified files

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.4%

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A path traversal vulnerability exists in IBM Security Guardium Key Lifecycle Manager, which stems from a vulnerability that allows a remote attacker to traverse a directory on the system, which could be exploited by an attacker to send a specially crafted URL request to view modified files on the system.

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.4%

Related for CNVD-2024-01171