Lucene search

[email protected]NVD:CVE-2018-1749

HistoryOct 08, 2018 - 3:29 p.m.

CVE-2018-1749

2018-10-0815:29:02

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

20.7%

JSON

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484.

Affected configurations

Nvd

Node

ibmsecurity_key_lifecycle_managerRange2.6.0–2.6.0.4

ibmsecurity_key_lifecycle_managerRange2.7.0–2.7.0.3

ibmsecurity_key_lifecycle_managerRange3.0–3.0.0.1

VendorProductVersionCPE
ibmsecurity_key_lifecycle_manager*cpe:2.3:a:ibm:security_key_lifecycle_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	security_key_lifecycle_manager	*	cpe:2.3:a:ibm:security_key_lifecycle_manager::::::::

References

www.ibm.com/support/docview.wss?uid=ibm10733303

exchange.xforce.ibmcloud.com/vulnerabilities/148484

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

20.7%

JSON

Related for NVD:CVE-2018-1749

ibm2 cvelist1 prion1 cve1