CVE Catalog
CVE-2016-6093
CriticalSummary
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Risk Assessment
The lack of strong password requirements increases the risk of user account takeover, potentially leading to unauthorized access to sensitive data.
Recommendation
It is recommended to configure IBM Tivoli Key Lifecycle Manager to enforce strong password usage by users.
Original NVD description (English source)
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.