CVE-2016-6102

Summary

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference #: 2000359.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationKey Lifecycle Manager2.5affected
IBM CorporationKey Lifecycle Manager2.6affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References