CVE-2016-6104 in IBM Tivoli Key Lifecycle Manager
Summary
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
Reservation
06/29/2016
Disclosure
02/07/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96610 | IBM Tivoli Key Lifecycle Manager unrestricted upload | 434 | Not defined | Not defined | CVE-2016-6104 |