PT-2017-12992 · Ibm · Ibm Security Identity Manager Adapters

Published 2017-09-25 · Updated 2019-10-03 · CVE-2017-1362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Adapters versions 6.0 through 7.0

Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user.

Recommendations For versions 6.0 through 7.0, update to a version that securely stores user credentials, ensuring that plain text storage is avoided to prevent unauthorized access.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2017-1362

Affected Products

Ibm Security Identity Manager Adapters

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/126801 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1362 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22007381 · Vendor Advisory
• http://securityfocus.com/bid/100965 · Note