PT-2024-9573
CVE-2024-49351
·
تاريخ النشر
2024-11-25
·
تاريخ التحديث
2024-11-26
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Workload Scheduler versions 9.5 through 10.2
Description
The issue is related to the storage of passwords in plain text. This could allow an attacker to disclose protected information. A local user can read the user credentials stored in plain text.
Recommendations
For versions 9.5 through 10.2, update to a version that stores user credentials securely, avoiding plain text storage.
As a temporary workaround, consider restricting access to the areas where credentials are stored to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾