Tivoli Key Lifecycle Manager

tivoli_key_lifecycle_manager

Vendor: Ibm • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6098 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Jun 8, 2017 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CVE-2016-6093 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Jun 8, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
CVE-2016-6097 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Feb 7, 2017 N/A· v4 4.0 MEDIUM· v3 2.1 LOW· v2 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system.
CVE-2016-6096 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Feb 7, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...Show more IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6094 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Feb 7, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data.
CVE-2016-6092 1Ibm 2Security Key Lifecycle Manager Tivoli Key Lifecycle Manager May 13, 2026 Feb 7, 2017 N/A· v4 6.2 MEDIUM· v3 2.1 LOW· v2 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.