CVE-2006-6607

WebSphere Application Server (WAS) for IBM Tivoli Identity Manager ...

Title source: llm

Description

The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods.

References (6)

Core 6

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23359

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017380

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/30865

Patch, Vendor Advisory x_refsource_confirm

http://www-1.ibm.com/support/docview.wss?uid=swg21251069

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/21570

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4989

Scores

EPSS 0.0050

EPSS Percentile 39.9%

Details

Status published

Products (1)

ibm/tivoli_identity_manager 4.6

Published Dec 18, 2006

Tracked Since Feb 18, 2026