PT-2017-8907 · Ibm · Ibm Tivoli Key Lifecycle Manager

Publicado 2017-02-01 · Atualizado 2017-02-11 · CVE-2016-6117

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.6

Description The issue concerns the deployment of IBM Tivoli Key Lifecycle Manager with active debugging code, which can lead to the disclosure of sensitive information.

Recommendations For versions 2.5 and 2.6, remove or disable the active debugging code to prevent the disclosure of sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-6117

Produtos afetados

Ibm Tivoli Key Lifecycle Manager

Referências · 5

• http://securitytracker.com/id/1037764 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6117 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-6117 · Aviso do Fabricante
• http://securityfocus.com/bid/95905 · Nota
• http://ibm.com/support/docview.wss?uid=swg21997983 · Aviso do Fabricante