| Package | Affected versions | Patched versions |
|---|---|---|
| security key lifecycle manager | = 2.5.0.0= 2.5.0.1= 2.5.0.2= 2.5.0.3= 2.5.0.4= 2.5.0.5= 2.5.0.6= 2.5.0.7= 2.6.0.0= 2.6.0.1= 2.6.0.2 | |
| tivoli key lifecycle manager | = 2.0.1= 2.0.1.1= 2.0.1.2= 2.0.1.3= 2.0.1.4= 2.0.1.5= 2.0.1.6= 2.0.1.7= 2.0.1.8 |
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free