漏洞描述 IBM Security Guardium Key Lifecycle Manager是国际商业机器(IBM)公司的一种加密密钥管理工具。可集中、简化和自动化密钥管理流程。 IBM Security Guardium Key Lifecycle Manager存在日志信息泄露漏洞,该漏洞源于允许将潜在的敏感信息存储在日志文件中。以下版本受到影响:4.1版本、4.1.1版本、4.2.0版本和4.2.1版本。
相关漏洞推荐 POC CVE-2025-36845: Eveo URVE Web Manager - Server-Side Request Forgery POC CVE-2025-49533: Adobe Experience Manager Forms - Insecure Deserialization POC wp-all-in-one-wp-security-and-firewall-fpd: All In One WP Security & Firewall - Full Path Disclosure POC wp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure POC wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure POC wp-all-in-one-wp-security-and-firewall-fpd: All In One WP Security & Firewall - Full Path Disclosure POC wp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure POC wp-better-wp-security-login-disclosure: WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure POC wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure Ksenia Security Lares 4.0 Home Automation 安全漏洞 ETAP Safety Manager 跨站脚本漏洞 POC CVE-2020-26836: SAP Solution Manager - Open Redirect POC bitrix-log-file-disclosure: Bitrix Site Manager - Log File Disclosure