CVE-2006-6607: IBM Tivoli Identity Manager

Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days.

The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods.

Affected products

• IBM Tivoli Identity Manager: version 4.6 only

Published 2006-12-18. Last modified 2026-06-16.