CVE-2018-1744

CVE-2018-1744 affects IBM Security Key Lifecycle Manager (SKLM) 2.5–3.0 and enables a remote attacker to traverse directories via crafted URLs containing dot-dot sequences (/../), allowing viewing of arbitrary files. The IBM bulletin lists affected SKLM versions 2.5 (up to 2.5.0.9), 2.6 (up to 2....

CVE-2018-1738

IBM Security Key Lifecycle Manager vulnerability CVE-2018-1738: an authenticated user could obtain highly sensitive information or jeopardize system integrity due to improper authentication. Affected versions are 2.6 (2.6.0.4), 2.7 (2.7.0.3), and 3.0 (3.0.0.1). The IBM security bulletin provides ...

CVE-2018-1747

IBM Security Key Lifecycle Manager (versions 2.5–3.0) is affected by CVE-2018-1747 due to an XML External Entity (XXE) vulnerability in the XML processing path. The issue allows a remote attacker to disclose sensitive information or exhaust memory resources. No remediation or patch details are pr...

CVE-2019-4515

CVE-2019-4515 affects IBM Security Key Lifecycle Manager (SKLM) 3.0–3.0.1. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to perform unauthorized actions on behalf of a trusted user. Affected SKLM versions include 3.0.x up to 3.0.0.2 and 3.0.1 up to 3.0.1.1....