VulnerabilityModified
CVE-2006-6607
The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing…
LOW 2.7EPSS 0.50%
Does this matter?
Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.
Description
The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods.
- CVSS 2.0
- 2.7 LOWAV:A/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 0.50% probability · 41th percentile
- CISA KEV
- Not listed
- Affected
- ibm/tivoli identity manager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23359
- http://securitytracker.com/id?1017380
- http://www-1.ibm.com/support/docview.wss?uid=swg21251069Patch, Vendor Advisory
- http://www.securityfocus.com/bid/21570
- http://www.vupen.com/english/advisories/2006/4989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30865
- http://secunia.com/advisories/23359
- http://securitytracker.com/id?1017380
- http://www-1.ibm.com/support/docview.wss?uid=swg21251069Patch, Vendor Advisory
- http://www.securityfocus.com/bid/21570
- http://www.vupen.com/english/advisories/2006/4989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30865
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.