IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
[
{
"product": "Security Key Lifecycle Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "2.5"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.6"
}
]
}
]