Security Guardium Key Lifecycle Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.2.1:*:*:*:*:*:*:*
part: a version: 4.2.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Guardium Key Lifecycle Manager (0d5dbff8-cce1-51d7-9e41-92ffacce0b79) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-49820 |
vulnerable | 2026-06-08 06:50:14.728840 |
IBM Security Guardium Key Lifecycle Manager information disclosure
LOW (3.7)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2024-12-17T17:42:14.257Z
Updated: 2024-12-17T20:37:34.046Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49819 |
vulnerable | 2026-06-08 06:50:14.728217 |
IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.1)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors.
Published: 2024-12-17T17:41:27.693Z
Updated: 2024-12-17T20:37:40.846Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49818 |
vulnerable | 2026-06-08 06:50:14.727580 |
IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.3)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1
could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2024-12-17T17:35:47.807Z
Updated: 2024-12-17T20:37:49.263Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49817 |
vulnerable | 2026-06-08 06:50:14.727038 |
IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.4)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.
Published: 2024-12-17T17:34:11.065Z
Updated: 2024-12-17T20:37:54.298Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49816 |
vulnerable | 2026-06-08 06:50:14.726519 |
IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.9)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.
Published: 2024-12-17T17:42:55.387Z
Updated: 2024-12-17T20:37:28.513Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.