Share this post:
A vulnerability has been idenitifed in the installation process of IBM Security Key Lifecycle Mangager that stores unencrypted credentials. Users with root access could have access to this information if it was not changed after installation of the product.
Affected product(s) and affected version(s):
IBM Security Key Lifecycle Manager V2.5 (Linux Installation)
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21665235
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/90988