CVE-2023-25921CWE-434

IBM Security Guardium Key Lifecycle Manager file upload

High · published February 29, 2024

CVSS v3.1
8.5
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-02-29T00:36Z
EPSS history
Timeline
  • 29 FEB 00:36Z
    IBM Security Guardium Key Lifecycle Manager file upload
    cvelistv5