CVE-2016-6104 in Tivoli Key Lifecycle Manager

Resumen (Inglés)

IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2016-06-29

Divulgación

2017-02-07

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
96610	IBM Tivoli Key Lifecycle Manager escalada de privilegios	434	No está definido	No está definido	CVE-2016-6104

Fuentes

• MITRE
• NVD
• CVE Details