CVE-2024-49816

Published: Dec 17, 2024Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.

Affected (4)

Products: Ibm: Security Guardium Key Lifecycle Manager

Ibm

1 product

Security Guardium Key Lifecycle Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.2.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.2.1

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.ibm.com/support/pages/node/7175067

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.