CVE-2023-25924CWE-863

IBM Security Key Lifecycle Manager improper authorization

Medium · published March 21, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-03-21T14:53Z
EPSS history
Timeline
  • 21 MAR 14:53Z
    IBM Security Key Lifecycle Manager improper authorization
    cvelistv5