VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 20, 2018· Updated Jun 17, 2026

CVE-2014-6111

CVE-2014-6111

Description

IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 store encrypted user credentials and the keystore password in cleartext in configuration files, which allows local users to decrypt SIM credentials via unspecified vectors. IBM X-Force ID: 96180.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • IBM/Security Identity Manager4 versions
    cpe:2.3:a:ibm:security_identity_manager:6.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:security_identity_manager:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_identity_manager:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_identity_manager:5.1:*:*:*:*:*:*:*
    • (no CPE)range: <6.0.0.4-ISS-SIM-IF0001
  • IBM/Tivoli Identity Managerllm-fuzzy
    Range: <5.1.0.15-ISS-TIM-IF0057

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.