Input validation

2020-07-2914:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 184158.

CPENameOperatorVersion
security_key_lifecycle_managereq3.0.1
security_key_lifecycle_managereq4.0

CPE	Name	Operator	Version
	security_key_lifecycle_manager	eq	3.0.1
	security_key_lifecycle_manager	eq	4.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/184158

www.ibm.com/support/pages/node/6253781