CVE Catalog
CVE-2016-9739
HighSummary
IBM Security Identity Manager Virtual Appliance stores user credentials in plain text, which can be read by a local user.
Risk Assessment
Storing passwords in plain text poses a serious security risk as local users may gain access to sensitive information.
Recommendation
It is recommended to implement encryption for credentials and restrict system access to authorized users only.
Other vulnerabilities in IBM Security Identity Manager Virtual Appliance
Original NVD description (English source)
IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user.