CVE-2016-6116

CVE-2016-6116 describes a sensitive information disclosure vulnerability in IBM Tivoli Key Lifecycle Manager versions 2.5 and 2.6. The flaw stems from the product's failure to properly implement HTTP Strict Transport Security (HSTS), allowing a remote attacker to potentially intercept and obtain sensitive data. Rated Medium with a CVSS v3 score of 5.9, this vulnerability requires high attack complexity but could lead to a complete compromise of confidentiality through man-in-the-middle techniques. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.