PT-2017-8888
CVE-2016-6092
·
Publicado
2017-02-07
·
Atualizado
2017-02-09
Descrição por
CVSS 3.1
6.2
MédiaMétricasAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Key Lifecycle Manager versions 2.0.1, 2.5, and 2.6
Description
The issue concerns the storage of user credentials in plain text, allowing a local user to read them.
Recommendations
For IBM Tivoli Key Lifecycle Manager version 2.0.1, consider updating the credential storage mechanism to encrypt user credentials.
For IBM Tivoli Key Lifecycle Manager version 2.5, consider updating the credential storage mechanism to encrypt user credentials.
For IBM Tivoli Key Lifecycle Manager version 2.6, consider updating the credential storage mechanism to encrypt user credentials.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾