CVE-2018-1749

MEDIUM

IBM Tivoli Key Lifecycle Manager <3.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=ibm10733303
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/148484

Scores

CVSS v3 4.3
EPSS 0.0090
EPSS Percentile 56.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (1)
ibm/security_key_lifecycle_manager 2.6.0 - 2.6.0.4
Published Oct 08, 2018
Tracked Since Feb 18, 2026