PT-2018-14003 · Ibm · Ibm Security Key Lifecycle Manager

Chris Shepherd + 5 · Published 2018-10-11 · Updated 2019-10-09 · CVE-2018-1738

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Key Lifecycle Manager versions 2.6 through 3.0

Description The issue is related to improper authentication mechanisms, which could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity.

Recommendations For versions 2.6 through 3.0, update to a version that includes proper authentication mechanisms to prevent sensitive information disclosure and system integrity compromise.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-1738

Affected Products

Ibm Security Key Lifecycle Manager

References · 4

• https://osv.dev/vulnerability/CVE-2018-1738 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147907 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10733309 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1738 · Security Note