PT-2017-12913 · Ibm · Ibm Infosphere Master Data Management Server

Publicado 2017-07-19 · Atualizado 2019-10-03 · CVE-2017-1309

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 11.0 through 11.6

Description The issue allows a local user to read user credentials stored in plain text.

Recommendations For IBM InfoSphere Master Data Management Server versions 11.0 through 11.6, consider restricting access to sensitive areas where credentials are stored to minimize the risk of exploitation.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2017-1309

Produtos afetados

Ibm Infosphere Master Data Management Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1309 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125463 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22005437 · Aviso do Fabricante
• http://securityfocus.com/bid/99872 · Nota
• https://osv.dev/vulnerability/CVE-2017-1309 · Aviso do Fabricante