CVE-2014-0872

The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain sensitive information by leveraging root access. IBM X-Force ID: 90988.

Score

CVSS 3.0 4.1 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-04-25

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-255

Affected products

• Security Key Lifecycle Manager (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/90988
• https://www.ibm.com/blogs/psirt/ibm-security-bulletin-unencrypted-credentials-stored-on-ibm-security-key-lifecycle-mana…