CVE-2017-1362

High

Published: 25/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Identity Manager Adapters versions 6.0 and 7.0 store user credentials in plain text, which can be read by a local user.

Risk Assessment

Storing passwords in plain text poses a serious security risk as local users can access sensitive information.

Recommendation

It is recommended to upgrade to the latest version of the software that provides proper security for credentials.

Other vulnerabilities in IBM Security Identity Manager Adapters 6.0 and 7.0

CVE-2017-1483High
IBM Security Identity Manager Adapters versions 6.0 and 7.0 do not perform an authentication check for critical resources or functionality, allowing anonymous users access to protected areas.

Original NVD description (English source)

IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS