7.8
CVSSv3

CVE-2014-6111

Published: 20/04/2018 Updated: 22/05/2018
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM Tivoli Identity Manager 5.1.x prior to 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x prior to 6.0.0.4-ISS-SIM-IF0001 and 7.0.x prior to 7.0.0.0-ISS-SIM-IF0003 store encrypted user credentials and the keystore password in cleartext in configuration files, which allows local users to decrypt SIM credentials via unspecified vectors. IBM X-Force ID: 96180.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm security identity manager 7.0

ibm tivoli identity manager 5.1

ibm security identity manager 6.0