CVE-2018-1749 MEDIUM

CVE-2018-1749

Vendor Ibm
Product Security Key Lifecycle Manager
Published October 8, 2018
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O

What the vulnerability does

01Description

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484.

Key dates

02Disclosure timeline

October 8, 2018 CVE published
September 17, 2024 Record updated