CVE-2016-6098

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Score

CVSS 3.0 8.1 High

Status

Modified - psirt@us.ibm.com

Published

2017-06-08

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Security Key Lifecycle Manager (Ibm)
• Tivoli Key Lifecycle Manager (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg21997958
• http://www.securityfocus.com/bid/95982
• https://exchange.xforce.ibmcloud.com/vulnerabilities/118254