Plain Text Credential Exposure in IBM InfoSphere Master Data Management
CVE-2017-1309

7.8HIGH

Key Information:

Vendor

IBM
Status
Infosphere Master Data Management
Vendor
CVE Published:
14 July 2017

What is CVE-2017-1309?

IBM InfoSphere Master Data Management Server versions 11.0 to 11.6 are affected by a vulnerability where user credentials are stored in plain text. This insecure storage method allows local users to access sensitive information, posing a significant risk to data confidentiality and user security. Mitigation strategies include enforcing secure storage practices and regularly auditing user permissions.

Affected Version(s)

InfoSphere Master Data Management 11.0

InfoSphere Master Data Management 11.3

InfoSphere Master Data Management 11.4

References

http://www.securityfocus.com/bid/99872
vdb-entryx_refsource_BID
http://www.ibm.com/support/docview.wss?uid=swg22005437
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/125463
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.