CVE-2014-6112: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before...

Security readout for executives and security teams

This CVE concerns IBM identity-management products allowing weak SSL ciphers. That can reduce protection for sensitive identity data in transit and make information disclosure easier for a remote attacker. The source bundle does not provide CVSS, CWE, or confirmed exploitation evidence. Exposure is most likely in legacy IBM Tivoli Identity Manager 5.1.x or IBM Security Identity Manager 6.0.x/7.0.x deployments that remain below the fixed interim-fix levels and still expose SSL/TLS services using weak cipher support. Prioritize if these IBM identity systems are still in production, especially when reachable by broad internal networks or the internet. The issue affects sensitive identity data, but urgency is tempered by limited public evidence and no KEV listing. Mitigation focus: Identify all deployed IBM Tivoli Identity Manager and Security Identity Manager versions.; Update 5.1.x to 5.1.0.15-ISS-TIM-IF0057 or later.; Update 6.0.x to 6.0.0.4-ISS-SIM-IF0001 or later..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.