Page 7 of 38 results (0.003 seconds)

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. IBM X-Force ID: 147907. IBM Security Key Lifecycle Manager 2.6, 2.7 y 3.0 podría permitir que un usuario autenticado obtenga información altamente sensible o comprometa la integridad del sistema debido a mecanismos de autenticación incorrectos. IBM X-Force ID: 147907. • http://www.ibm.com/support/docview.wss?uid=ibm10733309 https://exchange.xforce.ibmcloud.com/vulnerabilities/147907 • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424. IBM Security Key Lifecycle Manager 2.7 y 3.0 podría permitir que un usuario no autenticado reinicie el servidor SKLM debido a la falta de autenticación. IBM X-Force ID: 148424. • http://www.securityfocus.com/bid/105554 https://exchange.xforce.ibmcloud.com/vulnerabilities/148424 https://www.ibm.com/support/docview.wss?uid=ibm10733355 • CWE-306: Missing Authentication for Critical Function •

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 148514. IBM Tivoli Key Lifecycle Manager 2.6, 2.7 y 3.0 genera un mensaje de error que incluye información sensible sobre su entorno, usuarios o datos asociados. IBM X-Force ID: 148514. • http://www.ibm.com/support/docview.wss?uid=ibm10733359 https://exchange.xforce.ibmcloud.com/vulnerabilities/148514 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service, compromise program logic or other consequences. IBM X-Force ID: 148420. IBM Tivoli Key Lifecycle Manager 2.6, 2.7 y 3.0 no limita correctamente el número o frecuencia de la interacción, lo que podría emplearse para provocar una denegación de servicio (DoS), comprometer la lógica del programa u otras consecuencias. IBM X-Force ID: 148420. • http://www.ibm.com/support/docview.wss?uid=ibm10733425 https://exchange.xforce.ibmcloud.com/vulnerabilities/148420 •

CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 0

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 148421. IBM Tivoli Key Lifecycle Manager 2.6, 2.7 y 3.0 contiene credenciales embebidas, como una contraseña o clave criptográfica, que emplea para su propia autenticación entrante, comunicaciones a componentes externos o cifrado de datos internos. IBM X-Force ID: 148421. • http://www.ibm.com/support/docview.wss?uid=ibm10733419 https://exchange.xforce.ibmcloud.com/vulnerabilities/148421 • CWE-798: Use of Hard-coded Credentials •