Phase:IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
ReferencesBUGTRAQ:Sunday, October 24, 1999 password leak in IBM WebSphere / HTTP Server / ikeyman
Votes:Proposed (Wednesday, December 22, 1999)
Comments: ACCEPT(2) Baker, Stracener | MODIFY(1) Frech | NOOP(2) Bollinger, Christey | REVIEWING(1) Levy
F7: Frech> XF:websphere-database-pwd-accessible | Christey> ADDREF BID:1763 | URL:http://www.securityfocus.com/bid/1763