Security Advisory
CVE-2023-25926
5.5
MEDIUM
Vulnerability Description
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 247599.
Published Date
February 29, 2024
Official Source
NIST NVD Advisory