CVE-2023-25686

EUVD-2023-29601
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user.  IBM X-Force ID:  247601.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
ibmCNA
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Affected Products (NVD)
VendorProductVersion
ibmsecurity_key_lifecycle_manager
3.0
ibmsecurity_key_lifecycle_manager
3.0.1
ibmsecurity_key_lifecycle_manager
4.0
ibmsecurity_key_lifecycle_manager
4.1
ibmsecurity_key_lifecycle_manager
4.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/247601
https://www.ibm.com/support/pages/node/6962729
https://exchange.xforce.ibmcloud.com/vulnerabilities/247601
https://www.ibm.com/support/pages/node/6962729