Medium · 4.3 CVE-2023-25687 EUVD-2023-29602GHSA-7r96-f699-x2h6

IBM Security Key Lifecycle Manager information disclosure

Published Mar 21, 2023 · Updated Feb 25, 2025 · Assigned by ibm

Vendor: IBM Product: Security Key Lifecycle Manager

Description

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Key Lifecycle Manager	3.0, 3.0.1, 4.0, 4.1, 4.1.1	—

Advisories 1

WID-SEC-2023-0713 IBM Security Guardium Key Lifecycle Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 21, 2023

References

https://www.ibm.com/support/pages/node/6962729 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247602 vdb-entry