CVE-2018-1741 — IBM Security KEY Lifecycle Manager vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 55.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security KEY Lifecycle Manager
Timeline
PublishedOct 8
Latest updateMay 13

Description

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service, compromise program logic or other consequences. IBM X-Force ID: 148420.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

▶NVDibm/security_key_lifecycle_manager2.6.0 — 2.6.0.4+2
▶CVEListV5ibm/security_key_lifecycle_manager2.6, 2.7, 3.0+2

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4jvr-qpwq-f6h9: IBM Tivoli Key Lifecycle Manager 2↗2022-05-13
▶
CVEList
CVE-2018-1741: IBM Tivoli Key Lifecycle Manager 2↗2018-10-08
▶
CVE-2018-1741 — IBM vulnerability | cvebase