PT-2024-9573

CVE-2024-49351

·

Published

2024-11-25

·

Updated

2024-11-26

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Workload Scheduler versions 9.5 through 10.2
Description The issue is related to the storage of passwords in plain text. This could allow an attacker to disclose protected information. A local user can read the user credentials stored in plain text.
Recommendations For versions 9.5 through 10.2, update to a version that stores user credentials securely, avoiding plain text storage. As a temporary workaround, consider restricting access to the areas where credentials are stored to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾