CVE-2016-6095

Published: Feb 2, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

Affected (12)

Products: Ibm: Security Key Lifecycle Manager

Ibm

1 product

Security Key Lifecycle Manager

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Key Lifecycle Manager	Version 2.5.0.0
Ibm Security Key Lifecycle Manager	Version 2.5.0.1
Ibm Security Key Lifecycle Manager	Version 2.5.0.2
Ibm Security Key Lifecycle Manager	Version 2.5.0.3
Ibm Security Key Lifecycle Manager	Version 2.5.0.4
Ibm Security Key Lifecycle Manager	Version 2.5.0.5
Ibm Security Key Lifecycle Manager	Version 2.5.0.6
Ibm Security Key Lifecycle Manager	Version 2.5.0.7
Ibm Security Key Lifecycle Manager	Version 2.5.0
Ibm Security Key Lifecycle Manager	Version 2.6.0.1
Ibm Security Key Lifecycle Manager	Version 2.6.0.2
Ibm Security Key Lifecycle Manager	Version 2.6.0