IBM Tivoli Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2021-91635)

IBM Tivoli Key Lifecycle Manager (TKLM) is a set of key lifecycle management software from IBM Corporation. The software provides key storage, key maintenance, and key lifecycle management for storage devices.A security vulnerability exists in IBM Tivoli Key Lifecycle Manager, which stems from the fact that IBM Tivoli Key Lifecycle Manager uses a weaker-than-expected encryption algorithm. An attacker could exploit the vulnerability to decrypt highly sensitive information.