Back to search
CVE-2017-1671
Published: Jan 9, 2018
Modified: Sep 17, 2024
PUBLISHED
Description
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638.
| Vendor | Product | Versions |
|---|---|---|
IBM | Security Key Lifecycle Manager | affected 2.5affected 2.6affected 2.7 |
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/133638
x_refsource_MISC
http://www.ibm.com/support/docview.wss?uid=swg22011967
x_refsource_CONFIRM
102487
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now