CVE-2024-49819

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 17, 2024
Updated: Jan 10, 2025
CWE ID 319

Summary

CVE-2024-49819 is a newly disclosed vulnerability affecting IBM Security Guardium Key Lifecycle Manager versions 4.1, 4.1.1, 4.2.0, and 4.2.1. This issue grants unauthorized actors the ability to intercept and obtain sensitive information in cleartext through a communication channel that can be sniffed remotely. The vulnerability poses a significant risk to data confidentiality and should be addressed promptly by affected organizations through the application of available patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Security Guardium Key Lifecycle Manager

Affected Vendors

  • IBM Corporation