high8.8
CVE-2017-1672
IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized ac…
Impact
IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Key Lifecycle Manager | Versions 2.6.0, 2.6.0.1, 2.6.0.2, 2.6.0.3, 2.7.0, 2.7.0.1 |