Guardium Cloud Key Manager vulnerabilities

2 known vulnerabilities in Guardium Cloud Key Manager from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Guardium Cloud Key Manager: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-26271Aug 28, 2023IBM

  IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126.

• 9.8 Critical severity

  Guardium Cloud Key Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2023-26270Aug 28, 2023IBM

  IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could e