4.3
CVSSv2

CVE-2017-1665

Published: 04/01/2018 Updated: 29/04/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 133559.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm security key lifecycle manager 2.5.0.2

ibm security key lifecycle manager 2.5.0.3

ibm security key lifecycle manager 2.5.0.4

ibm security key lifecycle manager 2.5.0.5

ibm security key lifecycle manager 2.6.0.1

ibm security key lifecycle manager 2.6.0.2

ibm security key lifecycle manager 2.6.0.3

ibm security key lifecycle manager 2.7.0

ibm security key lifecycle manager 2.5.0.0

ibm security key lifecycle manager 2.5.0.7

ibm security key lifecycle manager 2.6.0

ibm security key lifecycle manager 2.7.0.1

ibm security key lifecycle manager 2.5.0

ibm security key lifecycle manager 2.5.0.1

ibm security key lifecycle manager 2.5.0.6

ibm security key lifecycle manager 2.5.0.8

ibm security key lifecycle manager 2.7.0.2

debian debian linux 9.0

Vendor Advisories

Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to open redirects, cross-site request forgery, information disclosure, session fixation or denial of service For the stable distribution (stretch), these problems have been fixed in version 287+dfsg-13+deb9u1 We recommend that you upgrade your symfony packag ...