CVE-2023-26270

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) version 1.10.3)

Description The issue is caused by an angular template injection flaw, allowing a remote attacker to execute arbitrary code on the system by sending a specially crafted request.

Recommendations For IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) version 1.10.3), consider disabling the angular template injection functionality until a patch is available. Restrict access to the system to minimize the risk of exploitation. Avoid using specially crafted requests in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.