PT-2017-12992 · Ibm · Ibm Security Identity Manager Adapters

Publicado 2017-09-25 · Atualizado 2019-10-03 · CVE-2017-1362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Adapters versions 6.0 through 7.0

Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user.

Recommendations For versions 6.0 through 7.0, update to a version that securely stores user credentials, ensuring that plain text storage is avoided to prevent unauthorized access.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-1362

Produtos afetados

Ibm Security Identity Manager Adapters

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/126801 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1362 · Aviso do Fabricante
• http://securityfocus.com/bid/100965 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1362 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg22007381 · Aviso do Fabricante