Non notée
CVE-2016-6104 IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the…
Description
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Key Lifecycle Manager | 2.6 | Pas de correctif indiqué |
| Key Lifecycle Manager | 2.5 | Pas de correctif indiqué |
| Key Lifecycle Manager 2.0 | 2.0 → 2.0.1 | Pas de correctif indiqué |
| Key Lifecycle Manager | 1.0 | Pas de correctif indiqué |
Autres CVE de Key Lifecycle Manager
Les 12 CVE de Key Lifecycle Manager →
CVE-2016-6102
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters
Non notée
CVE-2016-6096
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting
Non notée
CVE-2016-6094
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information…
Non notée
CVE-2016-6097
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by…
Non notée