Security Bulletin: IBM Security Key Lifecycle Manager stores unencrypted password (CVE-2016-6092)

Summary IBM Security Key Lifecycle Manager has identified a vulnerability where a password is stored in clear text. This vulnerability can enable attackers to obtain unauthorized access to other integrated systems. IBM Security Key Lifecycle Manager has addressed this vulnerability with the...

CVE-2016-6092

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-6092

CVE-2016-6092 affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager). The vulnerability arises because the product stores user credentials in plaintext, enabling a local attacker to read passwords. Affected versions include IBM Security Key Lifecycle Manager v2.5 (2.5....