Plain Text Credential Exposure in IBM InfoSphere Master Data Management
CVE-2017-1309

7.8HIGH

Key Information:

Vendor

IBM
Status
Infosphere Master Data Management
Vendor
CVE Published:
14 July 2017

What is CVE-2017-1309?

IBM InfoSphere Master Data Management Server versions 11.0 to 11.6 are affected by a vulnerability where user credentials are stored in plain text. This insecure storage method allows local users to access sensitive information, posing a significant risk to data confidentiality and user security. Mitigation strategies include enforcing secure storage practices and regularly auditing user permissions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

InfoSphere Master Data Management 11.0

InfoSphere Master Data Management 11.3

InfoSphere Master Data Management 11.4

References

http://www.securityfocus.com/bid/99872
vdb-entryx_refsource_BID
http://www.ibm.com/support/docview.wss?uid=swg22005437
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/125463
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.