Boletines de Vulnerabilidades

IBM Security Bulletin: Unencrypted credentials stored on IBM Security Key Lifecycle Manager server (CVE-2014-0872)
Información sobre el sistema

Software afectado	IBM
Descripción
A vulnerability has been idenitifed in the installation process of IBM Security Key Lifecycle Mangager that stores unencrypted credentials. Users with root access could have access to this information if it was not changed after installation of the product. CVE(s): CVE-2014-0872 Affected product(s) and affected version(s): IBM Security Key Lifecycle Manager V2.5 (Linux Installation) Refer to the following reference URLs for remediation and additional vulnerability details: Source More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_unencrypted_credentials_stored_on_ibm_security_key_lifecycle_manager_server_cve_2014_0872?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2014-0872.