First published: Thu Oct 04 2018(Updated: )
IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 148514.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Security Key Lifecycle Manager | >=2.6.0<=2.6.0.4 | |
IBM Security Key Lifecycle Manager | >=2.7.0<=2.7.0.3 | |
IBM Security Key Lifecycle Manager | >=3.0<=3.0.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1753 is considered to have a medium severity level due to its potential exposure of sensitive information.
CVE-2018-1753 affects IBM Tivoli Key Lifecycle Manager by causing it to generate error messages that reveal sensitive information about its environment.
CVE-2018-1753 affects versions 2.6, 2.7, and 3.0 of IBM Tivoli Key Lifecycle Manager up to specific subversions.
To mitigate CVE-2018-1753, ensure that your IBM Tivoli Key Lifecycle Manager is updated to a version that has addressed this vulnerability.
Yes, there are patches available for CVE-2018-1753 that can be applied to affected versions of IBM Tivoli Key Lifecycle Manager.