PT-2018-14022 · Ibm · Ibm Tivoli Key Lifecycle Manager

Chris Shepherd + 5 · Publicado 2018-10-08 · Atualizado 2019-10-09 · CVE-2018-1742

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Crítica

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.6 through 3.0

Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.

Recommendations For versions 2.6 through 3.0, update the software to remove the hard-coded credentials, replacing them with secure, configurable authentication mechanisms.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-1742

Produtos afetados

Ibm Tivoli Key Lifecycle Manager

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/148421 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1742 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1742 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10733419 · Aviso do Fabricante