Lucene search
HistoryDec 20, 2023 - 1:15 a.m.
CVE-2023-47704
ibm
security
guardium
key lifecycle manager 4.2
plain text
hard-coded
credentials
source code
repository
ibm x-force id
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.0%
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.
Affected configurations
Node
ibmsecurity_guardium_key_lifecycle_managerMatch4.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | security_guardium_key_lifecycle_manager | 4.3 | cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.3:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Guardium Key Lifecycle Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "4.3"
}
]
}
]Related
nvd
nvd
CVE-2023-47704
2023-12-20 01:15:07
prion
prion
Hardcoded credentials
2023-12-20 01:15:00
cvelist
cvelist
ibm
ibm
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.0%
Related for CVE-2023-47704