PT-2026-34578 · Ibm · Guardium Key Lifecycle Manager
CVE-2026-1726
·
Published
2026-04-22
·
Updated
2026-06-11
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Guardium Key Lifecycle Manager versions 4.1 through 5.1
Description
An issue enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. This could allow attackers to access sensitive data, modify system configurations, or change permissions for other users, undermining administrative controls and potentially leading to data breaches and system compromise.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
LPE
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Guardium Key Lifecycle Manager