PT-2017-8907
CVE-2016-6117
·
Published
2017-02-01
·
Updated
2017-02-11
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.6
Description
The issue concerns the deployment of IBM Tivoli Key Lifecycle Manager with active debugging code, which can lead to the disclosure of sensitive information.
Recommendations
For versions 2.5 and 2.6, remove or disable the active debugging code to prevent the disclosure of sensitive information.
Found an issue in the description? Have something to add? Feel free to write us 👾