PT-2017-9905
CVE-2016-8967
·
Published
2017-02-01
·
Updated
2017-02-09
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM BigFix Inventory version 9.2
Description
The issue concerns the storage of user credentials in plain text, which can be accessed by a local user. This allows unauthorized individuals to obtain sensitive information.
Recommendations
For IBM BigFix Inventory version 9.2, consider implementing additional security measures to protect user credentials, such as encrypting stored credentials or restricting local user access to sensitive data.
Found an issue in the description? Have something to add? Feel free to write us 👾