CVE-2019-4564

IBM Security Key Lifecycle Manager (SKLM) is affected by CVE-2019-4564 across versions 2.6–3.0.1. The vulnerability is a cross-site scripting flaw that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected produ...

CVE-2019-4514

CVE-2019-4514 affects IBM Security Key Lifecycle Manager (SKLM) chassis: vulnerable in versions 2.6–3.0.1 where information can be disclosed to unauthorized users. The disclosed data can be used to mount further attacks on the system, per NVD/IBM entries. The issue is a pure information-disclosur...

CVE-2019-4565

The CVE-2019-4565 issue affects IBM Security Key Lifecycle Manager (SKLM) versions 3.0 through 3.0.1, where a weak default password policy allows potential account compromise. Root cause: the product does not require strong passwords by default. Impact stated across sources indicates user account...

CVE-2019-4566

IBM Security Key Lifecycle Manager (SKLM) 3.0–3.0.1 stores user credentials in plaintext, readable by a local user. Affected: SKLM on distributed platforms. Root cause: credentials stored unencrypted in storage. Impact: local privilege could expose credentials; CVSS details present in sources (ba...

CVE-2019-4515

CVE-2019-4515 affects IBM Security Key Lifecycle Manager (SKLM) 3.0–3.0.1. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to perform unauthorized actions on behalf of a trusted user. Affected SKLM versions include 3.0.x up to 3.0.0.2 and 3.0.1 up to 3.0.1.1....