IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 vulnerabilities

IBM Tivoli Key Lifecycle Manager versions 2.5 and 2.6 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM Tivoli Key Lifecycle Manager versions 2.5 and 2.6 do not perform an authentication check for critical resources or functionalities, allowing anonymous users access to protected areas.

IBM Tivoli Key Lifecycle Manager versions 2.5 and 2.6 has inadequate account lockout settings that could allow a remote attacker to brute force account credentials.