CVE-2019-4564

IBM Security Key Lifecycle Manager (SKLM) is affected by CVE-2019-4564 across versions 2.6–3.0.1. The vulnerability is a cross-site scripting flaw that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected produ...

CVE-2019-4514

CVE-2019-4514 affects IBM Security Key Lifecycle Manager (SKLM) chassis: vulnerable in versions 2.6–3.0.1 where information can be disclosed to unauthorized users. The disclosed data can be used to mount further attacks on the system, per NVD/IBM entries. The issue is a pure information-disclosur...

CVE-2018-1750

CVE-2018-1750 affects IBM Security Key Lifecycle Manager (SKLM) with vulnerability in permissions on a security-critical resource that allows read/modify by unintended actors. Affected SKLM versions include 3.0-3.0.0.1, 2.7-2.7.0.4, and 2.6-2.6.0.5. IBM’s bulletin (and X-Force reference) confirms...