CVE-2019-4514 - IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users

Back Back to CVE browser

MEDIUM

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users

Published Oct 4, 2019

5.3

MEDIUM

CVSS 3.1

EPSS 1.31%

Description

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165136.

Affected products

Vendor IBM Product Security Key Lifecycle Manager Default
n/a
- Version
  2.6
  Status
  affected
  Constraints
  -
- Version
  2.7
  Status
  affected
  Constraints
  -
- Version
  3.0
  Status
  affected
  Constraints
  -
- Version
  3.0.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Security Key Lifecycle Manager

n/a

Version	Status	Constraints
2.6	affected	-
2.7	affected	-
3.0	affected	-
3.0.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/165136
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/302017
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/165136		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/302017		x_refsource_CONFIRMVendor Advisory