Lucene search
IbmCVELIST:CVE-2016-6104HistoryFeb 07, 2017 - 4:00 p.m.
CVE-2016-6104
2017-02-0716:00:00
ibm
www.cve.org
0.009 Low
EPSS
Percentile
82.8%
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
CNA Affected
[
{
"product": "Key Lifecycle Manager",
"vendor": "IBM Corporation",
"versions": [
{
"status": "affected",
"version": "2.5"
},
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.6"
}
]
}
]Related
cve
cve
CVE-2016-6104
2017-02-07 16:59:00
nvd
nvd
CVE-2016-6104
2017-02-07 16:59:00
prion
prion
Input validation
2017-02-07 16:59:00
