CVE-2023-25923CWE-863

IBM Security Key Lifecycle Manager denial of service

Low · published March 21, 2023

CVSS v3.1
2.7
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00672 · 51.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-03-21T15:07Z
EPSS history
Timeline
  • 21 MAR 15:07Z
    IBM Security Key Lifecycle Manager denial of service
    cvelistv5