Programmers are also people who also make mistakes

It's the first part of our talk with Daniil Svetlov at his radio show "Safe Environment" or "Safe Wednesday" - kind of wordplay in Russian recorded 29.03.2017. We were discussing why Software Vulnerabilities are everyone's problem. Full video in Russian without subtitles is available here. I adde...

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference : 2000359...

Information disclosure

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference : 2000359...

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference : 2000359...

CVE-2016-6102

CVE-2016-6102 affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager). The vulnerability arises because versions 2.5 (2.5.0.7 and earlier) and 2.6 (2.6.0.2 and earlier) store sensitive information in URL parameters, enabling possible information disclosure if URLs are c...

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference : 2000359...

IBM Security Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2017-05043)

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An information disclosure vulnerabili...

Unspecified Vulnerability in IBM Jazz Team Server

IBM Jazz Team Server is a set of project management tools for use in IBM Rational Jazz team collaboration platform from IBM in the United States. A security vulnerability exists in the CLM application in IBM Jazz Team Server. An attacker could exploit the vulnerability to gain access to user...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

Microsoft Ending Support for Windows Vista

All software products have a lifecycle. After April 11, 2017, Microsoft is ending support for the Windows Vista operating system. After this date, this product will no longer receive: Security updates, Non-security hotfixes, Free or paid assisted support options, or Online technical content updat...

Foreman Information Disclosure Vulnerability (CNVD-2017-02467)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An information disclosure vulnerability exists in Foreman. The vulnerability allows an attacker to gain...

Cross-site scripting vulnerability in multiple IBM products (CNVD-2017-02280)

IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager RELM are collaborative lifecycle management solutions; Rational DOORS Next Generation RDNG is a requirements...

IBM Security Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

IBM Tivoli Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

IBM Security Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2017-01411)

IBM Security Key Lifecycle Manager formerly known as TivoliKeyLifecycleManager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security vulnerability exists in IBM...

IBM Security Key Lifecycle Manager Plaintext Password Storage Vulnerability

IBM Security Key Lifecycle Manager formerly known as TivoliKeyLifecycleManager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security vulnerability exists in IBM...

IBM Tivoli Key Lifecycle Manager Information Disclosure Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A local information disclosure...

IBM Tivoli Key Lifecycle Manager Arbitrary Code Execution Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An arbitrary file upload vulnerabilit...

IBM Tivoli Key Lifecycle Manager Cross-Site Scripting Vulnerability

IBM Security Key Lifecycle Manager centralizes, simplifies and automates encryption and key management, helping users minimize risk and reduce operational costs. A cross-site scripting vulnerability exists in IBM Tivoli Key Lifecycle Manager versions 2.0.1, 2.5, 2.6, which could allow a remote...

Cross site scripting

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...