CVE-2024-49818

Published: Dec 17, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected (4)

Products: Ibm: Security Guardium Key Lifecycle Manager

Ibm

1 product

Security Guardium Key Lifecycle Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.2.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.2.1

Related CWEs

CWE-209

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

https://www.ibm.com/support/pages/node/7175067

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.