CVE-2024-49817

IBM Security Guardium Key Lifecycle Manager information disclosure PUBLISHED

Description (CNA)

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.

Affected (CNA)

Vendor / product	Versions
IBM / Security Guardium Key Lifecycle Manager	affected 4.1, 4.1.1, 4.2.0, 4.2.1

CWE

CWE-260

References

https://www.ibm.com/support/pages/node/7175067

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.