IBM Security Guardium OS Command Injection Vulnerability (CNVD-2024-11735)

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An operating system command injection vulnerability exists in IBM Security Guardium Key Lifecycle Manager, which can be exploited by an authenticated, remote attacker to execute arbitrary commands on the system by sending a specially crafted request.