CVE-2018-1745

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
IBM	Security Key Lifecycle Manager	2.7; 3.0

References

http://www.securityfocus.com/bid/105554Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/148424VDB Entry
https://www.ibm.com/support/docview.wss?uid=ibm10733355Patch, Vendor Advisory
http://www.securityfocus.com/bid/105554Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/148424VDB Entry
https://www.ibm.com/support/docview.wss?uid=ibm10733355Patch, Vendor Advisory

Timeline

Published: Oct 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-174504.3An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is S CVE-2018-174518.8An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is C CVE-2018-174529.8An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is S CVE-2018-174535.3An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers CVE-2018-174545.4An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is s CVE-2018-174557.5An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain s CVE-2018-174569.8Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows r CVE-2018-174578.8An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attack CVE-2018-174588.8An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to exec CVE-2018-174596.5Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the cont CVE-2018-174606.5Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of th CVE-2018-174618.8An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via