PT-2020-18252 · Ibm · Ibm Security Secret Server
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Security Secret Server version 10.6
Description
The issue concerns the storage of potentially sensitive information in configuration files. This information could be accessed by an authenticated user.
Recommendations
For IBM Security Secret Server version 10.6, consider restricting access to configuration files to minimize the risk of sensitive information disclosure.
Fix
Cleartext Storage of Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Security Secret Server