Credential Storage Vulnerability in IBM Spectrum Protect Client

CVE-2022-22478

What is CVE-2022-22478?

The IBM Spectrum Protect Client versions 8.1.0.0 through 8.1.14.0 are affected by a vulnerability where user credentials are stored in plain text, allowing a local user to access sensitive authentication information. This exposes users to potential unauthorized access and exploitation of their data. It highlights critical security implications regarding credential management in software design, necessitating immediate action to mitigate risks.

References