CVE-2016-6098

High

Published: 08/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Tivoli Key Lifecycle Manager versions 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially leading to serious security breaches.

Recommendation

It is recommended to review and adjust permissions for resources in IBM Tivoli Key Lifecycle Manager to ensure that only authorized users have access to critical resources.

Other vulnerabilities in IBM Tivoli Key Lifecycle Manager

CVE-2016-6093Critical
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Original NVD description (English source)

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.