Cleartext Credential Storage in IBM BigFix Compliance Analytics
CVE-2017-1201

7.8HIGH

Key Information:

Vendor

IBM
Status
Bigfix Compliance Analytics
Vendor
CVE Published:
2 October 2017

What is CVE-2017-1201?

IBM BigFix Compliance Analytics 1.9.79 has a vulnerability where sensitive user credentials are stored in clear text. This allows any local user with access to the system to read and potentially exploit these credentials, leading to unauthorized access and increased security risks.

Affected Version(s)

BigFix Compliance Analytics 1.9.79

References

http://www.ibm.com/support/docview.wss?uid=swg22008114
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/123676
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.