CVE-2023-25689

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Key Lifecycle Manager versions 3.0 through 4.1.1

Description The issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Recommendations For versions 3.0 through 4.1.1, as a temporary workaround, consider restricting access to sensitive files and directories until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.