IBM Security Bulletin:IBM Security Key Lifecycle Manager is affected by SQL injection (CVE-2017-1670 )
IBM Security Key Lifecycle Manager is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVE(s): CVE-2017-1670
Affected product(s) and affected version(s):
IBM Security Key Lifecycle Manager: v2.5 – 2.5.0.8
IBM Security Key Lifecycle Manager v2.6 – 2.6.0.3
IBM Security Key Lifecycle Manager: v2.7 – 2.7.0.2
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2lZ9rAH
X-Force Database: http://ift.tt/2CISmp4
The post IBM Security Bulletin:IBM Security Key Lifecycle Manager is affected by SQL injection (CVE-2017-1670 ) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2lUTdIW