Vulnerability Bulletins |
IBM Security Bulletin: Unencrypted credentials stored on IBM Security Key Lifecycle Manager server (CVE-2014-0872) |
|
| Affected software | IBM |
|
A vulnerability has been idenitifed in the installation process of IBM Security Key Lifecycle Mangager that stores unencrypted credentials. Users with root access could have access to this information if it was not changed after installation of the product. CVE(s): CVE-2014-0872 Affected product(s) and affected version(s): IBM Security Key Lifecycle Manager V2.5 (Linux Installation) Refer to the following reference URLs for remediation and additional vulnerability details: Source More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_unencrypted_credentials_stored_on_ibm_security_key_lifecycle_manager_server_cve_2014_0872?lang=en_us |
|