CVE-2024-49816CWE-532

IBM Security Guardium Key Lifecycle Manager information disclosure

Medium · published December 17, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-12-17T17:42Z
EPSS history
Timeline
  • 17 DEC 17:42Z
    IBM Security Guardium Key Lifecycle Manager information disclosure
    cvelistv5