CVEvulnerability

CVE-2006-6607

2.7 LOW Published 2006-12-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.7 LOW — AV:A/AC:L/Au:S/C:P/I:N/A:N

Description

The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods.

Affected configurations

• ibm tivoli identity manager 4.6

References