Lucene search
HistoryDec 20, 2023 - 1:15 a.m.
CVE-2023-47706
ibm
security
guardium
key
lifecycle
manager
4.3
authenticated
file
upload
vulnerability
cve-2023-47706
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
19.0%
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341.
Affected configurations
Node
ibmsecurity_guardium_key_lifecycle_managerMatch4.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | security_guardium_key_lifecycle_manager | 4.3 | cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.3:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Guardium Key Lifecycle Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "4.3"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2023-12-20 01:15:00
cvelist
cvelist
CVE-2023-47706 IBM Security Guardium Key Lifecycle Manager file upload
2023-12-20 00:59:32
nvd
nvd
CVE-2023-47706
2023-12-20 01:15:07
ibm
ibm
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
19.0%
Related for CVE-2023-47706