CVE-2024-49817CWE-260

IBM Security Guardium Key Lifecycle Manager information disclosure

Medium · published December 17, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-260 · Password in Configuration File
Published
2024-12-17T17:34Z
EPSS history
Timeline
  • 17 DEC 17:34Z
    IBM Security Guardium Key Lifecycle Manager information disclosure
    cvelistv5