Description (CNA)
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM Corporation / Key Lifecycle Manager | affected 2.5; affected 1.0; affected 2.0; affected 2.0.1; affected 2.6 |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1037763
- http://www.ibm.com/support/docview.wss?uid=swg21997741
- http://www.securityfocus.com/bid/95904
ADP enrichment
No English description supplied.