← CVE Intelligence

CVE-2016-6104

IBM Corporation / Key Lifecycle Manager PUBLISHED

Description (CNA)

IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.

Affected (CNA)

Vendor / productVersions
IBM Corporation / Key Lifecycle Manageraffected 2.5; affected 1.0; affected 2.0; affected 2.0.1; affected 2.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.