TK
Product
Tivoli Key Lifecycle Manager
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Tivoli Key Lifecycle Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6093 | 9.8 | Jun 8 | IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
| CVE-2016-6098 | 8.1 | Jun 8 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended… Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
| CVE-2016-6092 | 6.2 | Feb 7 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
| CVE-2016-6096 | 6.1 | Feb 7 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
| CVE-2016-6094 | 4.3 | Feb 7 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
| CVE-2016-6097 | 4.0 | Feb 7 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system Affected: 2.0.1; 2.0.1.1; 2.0.1.2; 2.0.1.3; 2.0.1.4; 2.0.1.5; +3 more |
Showing 6