IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 247597.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2023-03-21 10:15
Updated : 2023-03-21 13:07
NVD link : CVE-2023-25684
Mitre link : CVE-2023-25684
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
No product.