CVE-2023-25922CWE-434

IBM Security Guardium Key Lifecycle Manager file upload

Medium · published February 28, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-02-28T21:44Z
EPSS history
Timeline
  • 28 FEB 21:44Z
    IBM Security Guardium Key Lifecycle Manager file upload
    cvelistv5