PT-2018-14003 · Ibm · Ibm Security Key Lifecycle Manager

Chris Shepherd + 5 · Publicado 2018-10-11 · Atualizado 2019-10-09 · CVE-2018-1738

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Key Lifecycle Manager versions 2.6 through 3.0

Description The issue is related to improper authentication mechanisms, which could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity.

Recommendations For versions 2.6 through 3.0, update to a version that includes proper authentication mechanisms to prevent sensitive information disclosure and system integrity compromise.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-1738

Produtos afetados

Ibm Security Key Lifecycle Manager

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1738 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147907 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10733309 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1738 · Nota de Segurança