Security Bulletin: Multiple Vulnerabilities in IBM Security Guardium Key Lifecycle Manager

Summary There are multiple vulnerabilities identified in IBM Security Guardium Key Lifecycle Manager. These vulnerabilties have been fixed in IBM Security Guardium Key Lifecycle Manager v4.2 . Please upgrade to GKLM v4.2 for the fixes. Vulnerability Details CVEID:CVE-2023-25689 DESCRIPTION: IBM...

CVE-2023-25924

creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5553...

CVE-2023-25924 IBM Security Key Lifecycle Manager improper authorization

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630...

CVE-2023-25924

IBM Security Guardium Key Lifecycle Manager (GKLM) versions 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 contain an improper authorization flaw that could allow an authenticated user to perform actions beyond their access. The Red Hat advisory and IBM bulletin confirm the vulnerability under CVE-2023-25924, w...