CVE-2023-47702

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Key Lifecycle Manager version 4.3

Description The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing dot dot sequences (../) to view or modify files on the system.

Recommendations For IBM Security Guardium Key Lifecycle Manager version 4.3, consider restricting access to sensitive directories and files as a temporary workaround until a patch is available. Avoid using URL requests that contain dot dot sequences (../) in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.