Vulnerability Details CVE-2024-49817
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.0%
CVSS Severity
CVSS v3 Score 4.4
Products affected by CVE-2024-49817
-
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.1.0
-
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.1.1
-
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.2.0
-
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.2.1