Description
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Security Key Lifecycle Manager | 2.5, 2.0.1, 2.6 | — |