Design/Logic Flaw

2020-07-2914:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184179.

CPENameOperatorVersion
security_key_lifecycle_managereq3.0.1
security_key_lifecycle_managereq4.0

CPE	Name	Operator	Version
	security_key_lifecycle_manager	eq	3.0.1
	security_key_lifecycle_manager	eq	4.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/184179

www.ibm.com/support/pages/node/6253781