| Package | Affected versions | Patched versions |
|---|---|---|
| security key lifecycle manager | = 2.5.0= 2.5.0.0= 2.5.0.1= 2.5.0.2= 2.5.0.3= 2.5.0.4= 2.5.0.5= 2.5.0.6= 2.5.0.7= 2.6.0= 2.6.0.1= 2.6.0.2 |
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free