Not rated
CVE-2016-6099 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users
Description
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Key Lifecycle Manager | 2.6 | No fix stated |
| Key Lifecycle Manager | 2.5 | No fix stated |
| Key Lifecycle Manager 2.0 | 2.0 → 2.0.1 | No fix stated |
| Key Lifecycle Manager | 1.0 | No fix stated |
Other CVEs of Key Lifecycle Manager
The 12 CVEs of Key Lifecycle Manager →
CVE-2016-6102
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters
Not rated
CVE-2016-6097
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by…
Not rated
CVE-2016-6092
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by…
Not rated
CVE-2016-6096
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting
Not rated