IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
Storing a password in plaintext may result in a system compromise.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/7161947 | vendor advisory |