CVE-2021-38911

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user

Medium · published October 19, 2021

CVSS v3.0
4.4
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940.

The record
Technical detail
CVSS v3.0
4.4 · MEDIUM
Vector
CVSS:3.0/PR:H/AC:H/AV:N/UI:N/I:N/C:H/A:N/S:U/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Published
2021-10-19T15:15Z
EPSS history
Timeline
  • 19 OCT 15:15Z
    IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user
    cvelistv5