Lucene search
PRIOn knowledge basePRION:CVE-2023-25689HistoryMar 21, 2023 - 3:15 p.m.
Design/Logic Flaw
2023-03-2115:15:00
PRIOn knowledge base
www.prio-n.com
2
ibm
guardium
key lifecycle manager
directory traversal
remote attacker
url
arbitrary files
system
security flaw
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 247618.
Related
cvelist
cvelist
CVE-2023-25689 IBM Security Key Lifecycle Manager information disclosure
2023-03-21 14:49:21
nvd
nvd
CVE-2023-25689
2023-03-21 15:15:12
cve
cve
CVE-2023-25689
2023-03-21 15:15:12
ibm
ibm