IBM Tivoli Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2021-91636)

IBM Tivoli Key Lifecycle Manager (TKLM) is a set of key lifecycle management software from IBM Corporation. The software provides key storage, key maintenance, and key lifecycle management for storage devices.A security vulnerability exists in IBM Tivoli Key Lifecycle Manager, which stems from the failure of IBM Tivoli Key Lifecycle Manager to properly enable HTTP Strict Transport Security. An attacker could exploit the vulnerability to obtain sensitive information.