Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2019-4565

IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 166626.

  • Published: Sep 20, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-4565
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
ibm / security_key_lifecycle_manager 3.0 3.0.0.2.x
ibm / security_key_lifecycle_manager 3.0.1 3.0.1.1.x