First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2018-1749

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
IBM	Security Key Lifecycle Manager	2.6; 2.7; 3.0

References

Timeline

Published: Oct 8, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-174907.1EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit th CVE-2018-174917.8EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the pr CVE-2018-174927.8EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the applicat CVE-2018-174937.8eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visit CVE-2018-174947.8eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu CVE-2018-174957.8eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialo CVE-2018-174967.8eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the CVE-2018-174977.8eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the applicatio CVE-2018-174995.5Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing CVE-2018-17508.1IBM Security Key Lifecycle Manager 3.0 specifies permissions for a security-critical resource in a way that allows that resource to be read CVE-2018-175007.8Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing CVE-2018-175023.3The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An atta

CVE-2018-1749: Medium severity, CVSS 6.5 | Vulnix