2 lines
5.4 KiB
JSON
2 lines
5.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Security Key Lifecycle Manager","vendor":"IBM","versions":[{"status":"affected","version":"2.5"},{"status":"affected","version":"2.6"},{"status":"affected","version":"2.7"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4E0E836F-4C4E-4630-9999-91B166DEABA6","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E57B0BB-2994-4A47-9C32-3DA982F23071","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8FD5B68E-FB45-4985-96C7-6CFF3765E761","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AF878AE8-D016-4546-84ED-5D65E21F833B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"81E86F00-E597-4C98-9863-05A4BA84D0A4","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CAA52325-CC9C-481A-8140-32C86608E2B0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F809CA96-9F05-4E58-91D0-9F05DC984D2F","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"96706B40-58F2-42C6-8BCF-C92F54438EA1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D107CCC-476F-4453-BF41-B83923E5D695","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4EC75197-BBC8-4AA3-959D-4615410FC26B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"910F6230-F3C5-4993-B1E8-89FC07697A46","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DD31336F-4D30-4419-BBEB-516BA6646C38","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1807C6DB-650B-4249-B1EE-0C3E672EE360","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637."},{"lang":"es","value":"IBM Tivoli Key Lifecycle Manager 2.5, 2.6, y 2.7 es vulnerable a una inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 133637."}],"id":"CVE-2017-1670","lastModified":"2026-06-17T01:14:40.253","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-01-09T20:29:00.397","references":[{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22012009"},{"source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102429"},{"source":"psirt@us.ibm.com","tags":["VDB Entry"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/133637"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22012009"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102429"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/133637"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"nvd@nist.gov","type":"Primary"}]}
|