Weak Cryptographic Algorithm in IBM Guardium Key Lifecycle Manager
CVE-2026-78537

6.8MEDIUM

Key Information:

Vendor

IBM
Status
Guardium Key Lifecycle Manager
Vendor
CVE Published:
8 November 2026

What is CVE-2026-78537?

IBM Guardium Key Lifecycle Manager versions 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 may be susceptible to a security issue that allows local attackers to extract sensitive information. This risk arises from the implementation of a weak cryptographic algorithm, which fails to adequately protect confidential data. Users are urged to review the vendor's advisory and apply the necessary patches to mitigate this vulnerability. For more details, please refer to the official IBM support page.

Affected Version(s)

Guardium Key Lifecycle Manager 4.1

Guardium Key Lifecycle Manager 4.1.1

Guardium Key Lifecycle Manager 4.2

References

https://www.ibm.com/support/pages/node/7292031
vendor-advisorypatch

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.