User Credential Storage Vulnerability in IBM Security Guardium Insights
CVE-2020-4602

4.4MEDIUM

Key Information:

Vendor

IBM
Status
Security Guardium Insights
Vendor
CVE Published:
13 January 2021

What is CVE-2020-4602?

IBM Security Guardium Insights version 2.0.2 is susceptible to a vulnerability where user credentials are stored in plain text. This flaw allows a local user to access sensitive authentication details, posing serious risks to data security and user privacy. Proper measures should be taken to ensure encryption and secure handling of credentials to mitigate such vulnerabilities.

Affected Version(s)

Security Guardium Insights 2.0.2

References

https://www.ibm.com/support/pages/node/6403463
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/184836
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.