Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*

part: a version: 4.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Guardium Key Lifecycle Manager (0d5dbff8-cce1-51d7-9e41-92ffacce0b79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49820 vulnerable 2026-06-08 06:50:14.728715 IBM Security Guardium Key Lifecycle Manager information disclosure
LOW (3.7)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2024-12-17T17:42:14.257Z
Updated: 2024-12-17T20:37:34.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49819 vulnerable 2026-06-08 06:50:14.728077 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.1)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors.
Published: 2024-12-17T17:41:27.693Z
Updated: 2024-12-17T20:37:40.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49818 vulnerable 2026-06-08 06:50:14.727406 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.3)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2024-12-17T17:35:47.807Z
Updated: 2024-12-17T20:37:49.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49817 vulnerable 2026-06-08 06:50:14.726986 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.4)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.
Published: 2024-12-17T17:34:11.065Z
Updated: 2024-12-17T20:37:54.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49816 vulnerable 2026-06-08 06:50:14.724812 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4.9)
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.
Published: 2024-12-17T17:42:55.387Z
Updated: 2024-12-17T20:37:28.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25925 vulnerable 2026-06-08 05:56:10.772986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25921 vulnerable 2026-06-08 05:56:10.770231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38985 vulnerable 2026-06-08 05:33:48.706404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38984 vulnerable 2026-06-08 05:33:48.706001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38983 vulnerable 2026-06-08 05:33:48.705278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38982 vulnerable 2026-06-08 05:33:48.704380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38981 vulnerable 2026-06-08 05:33:48.703598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38980 vulnerable 2026-06-08 05:33:48.702823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38979 vulnerable 2026-06-08 05:33:48.702257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38978 vulnerable 2026-06-08 05:33:48.701194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38977 vulnerable 2026-06-08 05:33:48.700328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38976 vulnerable 2026-06-08 05:33:48.699381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38975 vulnerable 2026-06-08 05:33:48.698460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38974 vulnerable 2026-06-08 05:33:48.695342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38973 vulnerable 2026-06-08 05:33:48.692832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38972 vulnerable 2026-06-08 05:33:48.692103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.