NetSight
medium5.5

CVE-2021-38976

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user.

Impact

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user. X-Force ID: 212781.

Affected products

VendorProductAffected versions
IbmSecurity Guardium Key Lifecycle Manager
Versions 4.1.0, 4.1.0.1, 4.1.1
IbmSecurity Key Lifecycle Manager
from 3.0 through 3.0.0.4
from 3.0.1 through 3.0.1.5
from 4.0 through 4.0.0.3
Versions 4.1.0, 4.1.0.1, 4.1.1

Weakness classification

References