NetSight
IP …
critical9.8

CVE-2016-6093

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user ac…

Impact

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Affected products

VendorProductAffected versions
IbmSecurity Key Lifecycle Manager
Versions 2.5.0.0, 2.5.0.1, 2.5.0.2, 2.5.0.3, 2.5.0.4, 2.5.0.5
IbmTivoli Key Lifecycle Manager
Versions 2.0.1, 2.0.1.1, 2.0.1.2, 2.0.1.3, 2.0.1.4, 2.0.1.5

Weakness classification

CWE-255

References