Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6039 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.595Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991153 - http://www.securityfocus.com/bid/94853
CVE ID: CVE-2016-6040 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.974Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Bypass Security Description: IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95115 - https://www.ibm.com/support/docview.wss?uid=swg21996097
CVE ID: CVE-2016-6042 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:19.001Z Vendors: IBM Corporation Products: AppScan Enterprise Problem Types: Gain Access Description: IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in the same context as the victim. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995118
CVE ID: CVE-2016-6043 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.933Z Vendors: IBM Corporation Products: Tivoli Storage Manager Extended Edition Problem Types: Bypass Security Description: Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995754 - http://www.securityfocus.com/bid/95090
CVE ID: CVE-2016-6044 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.986Z Vendors: IBM Corporation Products: Tivoli Storage Manager Extended Edition Problem Types: Gain Privileges Description: IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95091 - http://www.ibm.com/support/docview.wss?uid=swg21995754
CVE ID: CVE-2016-6045 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.635Z Vendors: IBM Corporation Products: Tivoli Storage Manager Extended Edition Problem Types: Gain Access Description: IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995754 - http://www.securityfocus.com/bid/95087
CVE ID: CVE-2016-6046 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:19.902Z Vendors: IBM Corporation Products: Tivoli Storage Manager Extended Edition Problem Types: Cross-Site Scripting Description: IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95093 - http://www.ibm.com/support/docview.wss?uid=swg21995754
CVE ID: CVE-2016-6047 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.618Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991154 - http://www.securityfocus.com/bid/94843
CVE ID: CVE-2016-6054 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.931Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991154 - http://www.securityfocus.com/bid/94842
CVE ID: CVE-2016-6055 State: PUBLISHED Published: 2017-02-23T16:00:00 Last Updated: 2024-08-06T01:22:19.001Z Vendors: IBM Corporation Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1995515. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995515
CVE ID: CVE-2016-6056 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-06T01:22:18.910Z Vendors: IBM Corporation Products: Call Center for Commerce Problem Types: Cross-Site Scripting Description: IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000442. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96975 - http://www.ibm.com/support/docview.wss?uid=swg22000442
CVE ID: CVE-2016-6059 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.536Z Vendors: IBM Corporation Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94032 - http://www.ibm.com/support/docview.wss?uid=swg21991683
CVE ID: CVE-2016-6060 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T01:22:20.655Z Vendors: IBM Corporation Products: Rational DOORS Next Generation Problem Types: Obtain Information Description: An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference #: 1995547. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995547
CVE ID: CVE-2016-6061 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.928Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg21996097 - http://www.securityfocus.com/bid/95117
CVE ID: CVE-2016-6062 State: PUBLISHED Published: 2017-02-16T20:00:00 Last Updated: 2024-08-06T01:22:20.581Z Vendors: IBM Corporation Products: Resilient Problem Types: Cross-Site Scripting Description: IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference#: 213457065. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94268 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-resilient-cross-site-scripting-vuln
urityfocus.com/bid/94268 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-resilient-cross-site-scripting-vulnerability-cve-2016-6062/
CVE ID: CVE-2016-6065 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.323Z Vendors: IBM Corporation Products: Guardium Problem Types: Gain Privileges Description: IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95145 - http://www.ibm.com/support/docview.wss?uid=swg21995657
CVE ID: CVE-2016-6068 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:22:19.009Z Vendors: IBM Corporation Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg2C1000229 - http://www.securityfocus.com/bid/95290
CVE ID: CVE-2016-6072 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.986Z Vendors: IBM Corporation Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94355 - http://www.ibm.com/support/docview.wss?uid=swg21991893
CVE ID: CVE-2016-6077 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T01:22:18.942Z Vendors: IBM Corporation Products: Cognos Disclosure Management Problem Types: Gain Access Description: IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference #: 1991584. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93829 - http://www-01.ibm.com/support/docview.wss?uid=swg21991584
CVE ID: CVE-2016-6079 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T01:22:19.707Z Vendors: IBM Corporation Products: AIX Problem Types: Gain Privileges Description: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94090 - http://www.securitytracker.com/id/1037256 - http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc - https://www.exploit-db.com/exploits/40710/
CVE ID: CVE-2016-6080 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.734Z Vendors: IBM Corporation Products: WebSphere Message Broker Problem Types: Obtain Information Description: The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94641 - http://www.ibm.com/support/docview.wss?uid=swg21995004
CVE ID: CVE-2016-6082 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:19.004Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Gain Access Description: IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996375 - http://www.securityfocus.com/bid/95297
CVE ID: CVE-2016-6083 State: PUBLISHED Published: 2017-06-27T16:00:00 Last Updated: 2024-08-06T01:22:19.711Z Vendors: IBM Products: Tivoli Monitoring V6 Problem Types: Obtain Information Description: IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/117696 - http://www.securityfocus.com/bid/99259
CVE ID: CVE-2016-6084 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:18.986Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Denial of Service Description: IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996339 - http://www.securityfocus.com/bid/95286
CVE ID: CVE-2016-6085 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:19.662Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Denial of Service Description: IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95291 - http://www.ibm.com/support/docview.wss?uid=swg21996348
CVE ID: CVE-2016-6087 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T01:22:19.606Z Vendors: IBM Products: Domino Problem Types: Obtain Information Description: IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038606 - http://www.securityfocus.com/bid/98794 - http://www.ibm.com/support/docview.wss?uid=swg22002808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/117918
CVE ID: CVE-2016-6089 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T01:22:20.111Z Vendors: IBM Products: MQ Problem Types: File Manipulation Description: IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they should not have access to due to improper access controls. IBM X-Force ID: 117926. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/117926 - http://www.ibm.com/support/docview.wss?uid=swg22003509 - http://www.securityfocus.com/bid/98770
CVE ID: CVE-2016-6090 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.555Z Vendors: IBM Corporation Products: WebSphere Commerce Enterprise Problem Types: Gain Privileges Description: IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992759 - http://www.securityfocus.com/bid/93873 - http://www.securitytracker.com/id/1037091
CVE ID: CVE-2016-6091 State: REJECTED Published: 2017-01-10T17:00:00 Last Updated: 2017-01-10T16:57:01 Description: No description available.
CVE ID: CVE-2016-6092 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-06T01:22:19.750Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997953
CVE ID: CVE-2016-6093 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T01:22:20.011Z Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997956 - http://www.securityfocus.com/bid/95985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118172
CVE ID: CVE-2016-6094 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-06T01:22:18.981Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997987 - http://www.securityfocus.com/bid/95984
CVE ID: CVE-2016-6095 State: PUBLISHED Published: 2017-02-02T22:00:00 Last Updated: 2024-08-06T01:22:20.624Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95965 - http://www.ibm.com/support/docview.wss?uid=swg21997802
CVE ID: CVE-2016-6096 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-06T01:22:19.610Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95983 - http://www.ibm.com/support/docview.wss?uid=swg21997984
CVE ID: CVE-2016-6097 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-06T01:22:18.988Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997986 - http://www.securityfocus.com/bid/95977
CVE ID: CVE-2016-6098 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T01:22:19.688Z Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997958 - http://www.securityfocus.com/bid/95982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118254
CVE ID: CVE-2016-6099 State: PUBLISHED Published: 2017-02-02T22:00:00 Last Updated: 2024-08-06T01:22:19.614Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997924 - http://www.securityfocus.com/bid/95958
CVE ID: CVE-2016-6100 State: PUBLISHED Published: 2017-04-05T18:00:00 Last Updated: 2024-08-06T01:22:20.539Z Vendors: IBM Corporation Products: Atlas Policy Suite Problem Types: Gain Access Description: IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000771. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000771 - http://www.securityfocus.com/bid/9
ram Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000771 - http://www.securityfocus.com/bid/97326
CVE ID: CVE-2016-6102 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-06T01:22:20.339Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference #: 2000359. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96976 - http://www.securitytracker.com/id/1038093 - http://www.ibm.com/support/docview.wss?uid=swg22000359
CVE ID: CVE-2016-6103 State: PUBLISHED Published: 2017-02-02T22:00:00 Last Updated: 2024-08-06T01:22:19.684Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997949 - http://www.securityfocus.com/bid/95950
CVE ID: CVE-2016-6104 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-06T01:22:20.038Z Vendors: IBM Corporation Products: Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997988 - http://www.securityfocus.com/bid/95980