CVE-2023-25924

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization.  IBM X-Force ID:  247630.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
ibmCNA
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
ibmsecurity_key_lifecycle_manager
3.0
ibmsecurity_key_lifecycle_manager
3.0.1
ibmsecurity_key_lifecycle_manager
4.0
ibmsecurity_key_lifecycle_manager
4.1
ibmsecurity_key_lifecycle_manager
4.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/247630
https://www.ibm.com/support/pages/node/6962729
https://exchange.xforce.ibmcloud.com/vulnerabilities/247630
https://www.ibm.com/support/pages/node/6962729