CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference #: 2000359.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=swg22000359Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96976Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038093
• http://www.ibm.com/support/docview.wss?uid=swg22000359Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96976Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038093

Published

Mar 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6095IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequ…
• CVE-2016-6096IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vuln…
• CVE-2016-6097IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows …
• CVE-2016-6098IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifi…
• CVE-2016-6099IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensi…
• CVE-2016-6100IBM Disposal and Governance Management for IT and IBM Global…
• CVE-2016-6103IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable t…
• CVE-2016-6104IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a …
• CVE-2016-6105IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform …
• CVE-2016-6110IBM Tivoli Storage Manager discloses unencrypted login crede…
• CVE-2016-6111IBM Curam Social Program Management 6.0 and 7.0 are vulnerab…
• CVE-2016-6112IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9…