← CVE Intelligence

CVE-2016-6116

IBM Corporation / Key Lifecycle Manager PUBLISHED

Description (CNA)

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected (CNA)

Vendor / productVersions
IBM Corporation / Key Lifecycle Manageraffected 2.5; affected 1.0; affected 2.0; affected 2.0.1; affected 2.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.