PT-2017-12913 · Ibm · Ibm Infosphere Master Data Management Server

Published 2017-07-19 · Updated 2019-10-03 · CVE-2017-1309

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 11.0 through 11.6

Description The issue allows a local user to read user credentials stored in plain text.

Recommendations For IBM InfoSphere Master Data Management Server versions 11.0 through 11.6, consider restricting access to sensitive areas where credentials are stored to minimize the risk of exploitation.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2017-1309

Affected Products

Ibm Infosphere Master Data Management Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1309 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125463 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22005437 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1309 · Vendor Advisory
• http://securityfocus.com/bid/99872 · Note