Skip to content
OpenAdvisories

Product · IBM

Guardium Cloud Key Manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-26270

    IBM Security Guardium Data Encryption code execution

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could …

    IBM Guardium Cloud Key Manager
  • Medium 5.3
    CVE-2023-26271

    IBM Security Guardium Data Encryption information disclosure

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126.

    IBM Guardium Cloud Key Manager
  • Medium 5.3
    CVE-2023-26272

    IBM Security Guardium Data Encryption information disclosure

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further a…

    IBM Guardium Cloud Key Manager