User Credential Exposure in IBM Verify Gateway by IBM

CVE-2020-4372

What is CVE-2020-4372?

The IBM Verify Gateway (IVG) versions 1.0.0 and 1.0.1 are susceptible to a security vulnerability where user credentials are stored in plain text. This flaw allows local users to access sensitive information, heightening the risk of unauthorized access and potential account compromise. Organizations using these versions are advised to implement immediate remediation steps to safeguard against this vulnerability. For more details, you can refer to the IBM support page and the X-Force Exchange.

References