6.3
Medium
CVE-2019-4676 IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read…
Description
IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171512.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Identity Manager Virtual Appliance | 7.0.2 | No fix stated |
Other CVEs of Security Identity Manager Virtual Appliance
The 4 CVEs of Security Identity Manager Virtual Appliance →
CVE-2019-4705
IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users
2.7
Low
CVE-2019-4706
IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature…
2.7
Low
CVE-2019-4704
IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or…
3.7
Low