CVE-2016-6104

IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions…

published February 7, 2017

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02685 · 85.6th percentile
Published
2017-02-07T16:00Z
EPSS history
Timeline
  • 07 FEB 16:00Z
    IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions…
    cvelistv5