Design/Logic Flaw

2023-03-2206:15:00

PRIOn knowledge base

www.prio-n.com

ibm

guardium

key lifecycle manager

remote attack

directory traversal

security flaw

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 247606.

CPENameOperatorVersion
security_key_lifecycle_managereq3.0
security_key_lifecycle_managereq3.0.1
security_key_lifecycle_managereq4.0
security_key_lifecycle_managereq4.1.1
security_key_lifecycle_managereq4.1

Name	Operator	Version
security_key_lifecycle_manager	eq	3.0
security_key_lifecycle_manager	eq	3.0.1
security_key_lifecycle_manager	eq	4.0
security_key_lifecycle_manager	eq	4.1.1
security_key_lifecycle_manager	eq	4.1