CVE-2026-78537 PUBLISHED

IBM Guardium Key Lifecycle Manager is affected by a security vulnerability

Assigner: ibm
Reserved: 24.08.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS Score: 6.8

Product Status

Vendor IBM
Product Guardium Key Lifecycle Manager
Versions
  • Version 4.1 is affected
  • Version 4.1.1 is affected
  • Version 4.2 is affected
  • Version 4.2.1 is affected
  • Version 5.0 is affected
  • Version 5.1 is affected

Solutions

IBM encourages customers to update their systems promptly.

Principal Product and Version(s)Remediation/FixesIBM Guardium Key Lifecycle Manager (GKLM) v4.1

  1. Download IBM Guardium Key Lifecycle Manager  https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions

References

Problem Types

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm CWE