IBM Security Key Lifecycle Manager 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Key Lifecycle Manager (88c6c55d-8156-50ed-99f8-95060ba40722) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-25924 |
vulnerable | 2026-06-08 05:56:10.772408 |
IBM Security Key Lifecycle Manager improper authorization
MEDIUM (5.4)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630.
Published: 2023-03-21T14:53:38.493Z
Updated: 2025-02-26T16:48:20.517Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25923 |
vulnerable | 2026-06-08 05:56:10.771955 |
IBM Security Key Lifecycle Manager denial of service
LOW (2.7)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629.
Published: 2023-03-21T15:07:53.940Z
Updated: 2025-02-26T16:46:51.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25689 |
vulnerable | 2026-06-08 05:56:09.644956 |
IBM Security Key Lifecycle Manager information disclosure
LOW (2.7)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 247618.
Published: 2023-03-21T14:49:21.593Z
Updated: 2025-02-25T21:04:24.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25688 |
vulnerable | 2026-06-08 05:56:09.644520 |
IBM Security Key Lifecycle Manager information disclosure
MEDIUM (4.3)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 247606.
Published: 2023-03-21T15:01:07.193Z
Updated: 2025-02-26T16:47:19.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25687 |
vulnerable | 2026-06-08 05:56:09.643941 |
IBM Security Key Lifecycle Manager information disclosure
MEDIUM (4.3)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.
Published: 2023-03-21T14:57:32.812Z
Updated: 2025-02-25T19:57:39.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25686 |
vulnerable | 2026-06-08 05:56:09.641929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25684 |
vulnerable | 2026-06-08 05:56:09.638419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4568 |
vulnerable | 2026-06-08 05:25:59.554674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1750 |
vulnerable | 2026-06-08 05:11:18.692859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.