SG
Product
Security Guardium Key Lifecycle Manager
29
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 16Low 2
Watch
Add Security Guardium Key Lifecycle Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38975 | 6.5 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2021-38974 | 6.5 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2021-38978 | 5.9 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict… Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2021-38976 | 5.5 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2023-47707 | 5.4 | Dec 20 | IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting Affected: 4.2.0 through 4.2.0.2 |
| CVE-2021-38982 | 5.4 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2023-47703 | 5.3 | Dec 20 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 4.2.0 before 4.2.0.2 |
| CVE-2021-38980 | 5.3 | Nov 23 | IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a… Affected: 4.1.0 through 4.1.0.1; 4.1.1 |
| CVE-2021-38981 | 5.3 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the… Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2024-49816 | 4.4 | Dec 17 | IBM Security Guardium Key Lifecycle Manager information disclosure Affected: 4.1, 4.1.1, 4.2.0, 4.2.1 |
| CVE-2024-49817 | 4.4 | Dec 17 | IBM Security Guardium Key Lifecycle Manager information disclosure Affected: 4.1, 4.1.1, 4.2.0, 4.2.1 |
| CVE-2024-49818 | 4.3 | Dec 17 | IBM Security Guardium Key Lifecycle Manager information disclosure Affected: 4.1, 4.1.1, 4.2.0, 4.2.1 |
| CVE-2023-47705 | 4.3 | Dec 20 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation Affected: 4.2.0 before 4.2.0.2 |
| CVE-2021-38977 | 4.3 | Nov 15 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies Affected: 4.1.0; 4.1.0.1; 4.1.1 |
| CVE-2021-38985 | 4.3 | Nov 12 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are… Affected: 4.1.0 through 4.1.0.1; 4.1.1 |
| CVE-2021-38972 | 4.3 | Nov 12 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are… Affected: 4.1.0 through 4.1.0.1; 4.1.1 |
Showing 16