Unscored CVE-2014-0872 EUVD-2014-0902GHSA-hmcr-j622-757q

The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain …

Published Apr 25, 2018 · Updated Aug 6, 2024 · Assigned by ibm

Description

The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain sensitive information by leveraging root access. IBM X-Force ID: 90988.

References

ibm-tivoli-cve20140872-info-disc(90988) vdb-entry
https://www.ibm.com/blogs/psirt/ibm-security-bulletin-unencrypted-credentials-stored-on-ibm-security-key-lifecycle-manager-server-cve-2014-0872/