CVE-2023-25922 MEDIUM

CVE-2023-25922: IBM Security Guardium Key Lifecycle Manager file upload

Vendor Ibm
Product Security Guardium Key Lifecycle Manager
Weakness CWE-434 · Unrestricted file upload
Published February 28, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621.

Key dates

02Disclosure timeline

February 28, 2024 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-50527 WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Arbitrary File Upload vulnerability CVE-2022-1273 Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE CVE-2024-8342 SourceCodester Petshop Management System add_client.php unrestricted upload CVE-2026-24729 Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type CVE-2024-9544 MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting