PatchTheCVE: security guardium key lifecycle managerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-49820: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtahttps://patchthecve.com/cve/CVE-2024-49820.htmlhttps://patchthecve.com/cve/CVE-2024-49820.htmlWed, 17 Jun 2026 08:00:29 +0000LOW 3.7: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in tCVE-2024-49819: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtahttps://patchthecve.com/cve/CVE-2024-49819.htmlhttps://patchthecve.com/cve/CVE-2024-49819.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 4.1: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors.CVE-2024-49818: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obhttps://patchthecve.com/cve/CVE-2024-49818.htmlhttps://patchthecve.com/cve/CVE-2024-49818.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 4.3: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.CVE-2024-49817: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configurathttps://patchthecve.com/cve/CVE-2024-49817.htmlhttps://patchthecve.com/cve/CVE-2024-49817.htmlWed, 17 Jun 2026 08:00:28 +0000MEDIUM 4.4: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user.CVE-2024-49816: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive informathttps://patchthecve.com/cve/CVE-2024-49816.htmlhttps://patchthecve.com/cve/CVE-2024-49816.htmlWed, 17 Jun 2026 08:00:28 +0000MEDIUM 4.9: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.