CVE-2018-1749

Published: Oct 8, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484.

Affected (3)

Products: Ibm: Security Key Lifecycle Manager

Ibm

1 product

Security Key Lifecycle Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Key Lifecycle Manager	From 2.6.0 to 2.6.0.4
Ibm Security Key Lifecycle Manager	From 2.7.0 to 2.7.0.3
Ibm Security Key Lifecycle Manager	From 3.0 to 3.0.0.1

References (4)

http://www.ibm.com/support/docview.wss?uid=ibm10733303

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/148484

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=ibm10733303

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/148484

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.