{"vulnerability": "CVE-2023-2568", "sightings": [{"uuid": "9bfe2540-e458-4465-9c35-051540c35ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25689", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25689\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  247618.\n\ud83d\udccf Published: 2023-03-21T14:49:21.593Z\n\ud83d\udccf Modified: 2025-02-25T21:04:24.800Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6962729\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/247618", "creation_timestamp": "2025-02-25T21:28:11.000000Z"}, {"uuid": "327403d2-5042-4ee8-ab84-8eb40da50126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25687", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5378", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25687\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files.  IBM X-Force ID:  247602.\n\ud83d\udccf Published: 2023-03-21T14:57:32.812Z\n\ud83d\udccf Modified: 2025-02-25T19:57:39.074Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6962729\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/247602", "creation_timestamp": "2025-02-25T20:23:06.000000Z"}, {"uuid": "ea39b63f-05f2-467d-b382-aa7a7145e624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25680\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials.   Queue Provider credentials are not obfuscated while editing queue provider details.  IBM X-Force ID:  247032.\n\ud83d\udccf Published: 2023-03-15T19:42:46.825Z\n\ud83d\udccf Modified: 2025-02-26T20:16:33.215Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6962207\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/247032", "creation_timestamp": "2025-02-26T20:24:42.000000Z"}, {"uuid": "9a9728f5-062e-4cf2-9b4b-8371740eae81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25688", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25688\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  247606.\n\ud83d\udccf Published: 2023-03-21T15:01:07.193Z\n\ud83d\udccf Modified: 2025-02-26T16:47:19.515Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6962729\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/247606", "creation_timestamp": "2025-02-26T17:24:31.000000Z"}, {"uuid": "eeb3a038-cd3d-43ae-a6c1-775de8c5a992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25681", "type": "seen", "source": "https://t.me/ctinow/200711", "content": "https://ift.tt/KmYMVv1\nCVE-2023-25681", "creation_timestamp": "2024-03-05T21:26:43.000000Z"}, {"uuid": "f0ccdc9e-c2c4-4827-9e1f-a85ab4c95fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25681", "type": "seen", "source": "https://t.me/ctinow/200702", "content": "https://ift.tt/KmYMVv1\nCVE-2023-25681", "creation_timestamp": "2024-03-05T21:26:31.000000Z"}, {"uuid": "26a9540e-aa36-4fb3-a7e4-7be83ccdfa7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-2568", "type": "seen", "source": "https://t.me/cibsecurity/65142", "content": "\u203c CVE-2023-2568 \u203c\n\nThe Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-12T22:14:21.000000Z"}, {"uuid": "d91627af-0551-4ea5-a8be-e4475d86fea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25683", "type": "seen", "source": "https://t.me/cibsecurity/65255", "content": "\u203c CVE-2023-25683 \u203c\n\nIBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-15T08:52:40.000000Z"}, {"uuid": "b71fd7d4-34a9-4537-af37-1fd3d71712c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25684", "type": "seen", "source": "https://t.me/cibsecurity/60393", "content": "\u203c CVE-2023-25684 \u203c\n\nIBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 247597.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T19:35:02.000000Z"}, {"uuid": "d575b75b-c7a1-458f-a480-0da2fe5cdd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25686", "type": "seen", "source": "https://t.me/cibsecurity/60391", "content": "\u203c CVE-2023-25686 \u203c\n\nIBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 247601.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T19:34:57.000000Z"}, {"uuid": "1f32eefc-4cb4-456b-883b-03057dc37e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25689", "type": "seen", "source": "https://t.me/cibsecurity/60378", "content": "\u203c CVE-2023-25689 \u203c\n\nIBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 247618.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:34:55.000000Z"}, {"uuid": "02466e56-530b-4588-8b35-b8e8c0d8b934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25687", "type": "seen", "source": "https://t.me/cibsecurity/60382", "content": "\u203c CVE-2023-25687 \u203c\n\nIBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:35:01.000000Z"}, {"uuid": "8cb83ca5-381a-4370-ab0a-90976c5cd43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-25680", "type": "seen", "source": "https://t.me/cibsecurity/60095", "content": "\u203c CVE-2023-25680 \u203c\n\nIBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T23:30:16.000000Z"}]}