VulnerabilityModified
CVE-2023-47705
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation.
MEDIUM 4.3EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 0.52% probability · 43th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/security guardium key lifecycle manager
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/271228VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7091157Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/271228VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7091157Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.