Skip to content
OpenAdvisories
Unscored CVE-2017-1670 EUVD-2017-10686GHSA-8gpr-xf5x-5gg8

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL state…

Published Jan 9, 2018 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637.

Affected products

VendorProductAffectedFixed
IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7 —

References