Plain Text Credential Exposure in IBM InfoSphere Master Data Management
CVE-2017-1309
7.8HIGH
Summary
IBM InfoSphere Master Data Management Server versions 11.0 to 11.6 are affected by a vulnerability where user credentials are stored in plain text. This insecure storage method allows local users to access sensitive information, posing a significant risk to data confidentiality and user security. Mitigation strategies include enforcing secure storage practices and regularly auditing user permissions.
Affected Version(s)
InfoSphere Master Data Management 11.0
InfoSphere Master Data Management 11.3
InfoSphere Master Data Management 11.4
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved