Lucene search
IBM472A08980355FF0C604D81A30150ACFF9083A19DF698EC8488258827D0129D37HistoryOct 04, 2018 - 3:20 p.m.
Security Bulletin: IBM Security Key Lifecycle Manager Misses Authentication for Critical Function (CVE-2018-1745)
2018-10-0415:20:01
www.ibm.com
11
0.003 Low
EPSS
Percentile
66.3%
Summary
IBM Security Key Lifecycle Manager could allow an unauthenticated user to restart the SKLM server due to missing authentication.
Vulnerability Details
CVEID: CVE-2018-1745 DESCRIPTION: IBM Tivoli Key Lifecycle Manager could allow an unauthenticated user to restart the SKLM server due to missing authentication.
CVSS Base Score: 7.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/148424> for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Products and Versions
IBM Security Key Lifecycle Manager: v2.7 - 2.7.0.3
IBM Security Key Lifecycle Manager: v3.0- 3.0.0.1
Remediation/Fixes
| Product | VRMF | Remediation/First Fix |
|---|---|---|
| IBM Security Key Lifecycle Manager | 2.7- 2.7.0.3 | 2.7.0-ISS-SKLM-FP0004 |
| IBM Security Key Lifecycle Manager | 3.0- 3.0.0.1 | 3.0.0-ISS-SKLM-FP0002 |
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm security key lifecycle manager | eq | 2.7 | |
| ibm security key lifecycle manager | eq | 3.0 |
Related
cvelist
cvelist
CVE-2018-1745
2018-10-04 00:00:00
prion
prion
Authentication flaw
2018-10-11 12:29:00
cve
cve
CVE-2018-1745
2018-10-11 12:29:00
nvd
nvd
CVE-2018-1745
2018-10-11 12:29:00
ibm
ibm
IBM Security Key Lifecycle Manager: All Security Bulletins
2019-05-08 15:31:02
0.003 Low
EPSS
Percentile
66.3%
Related for 472A08980355FF0C604D81A30150ACFF9083A19DF698EC8488258827D0129D37