Clear Text Storage of User Credentials in IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0

CVE-2021-20439 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.

Learn more about our Cis Benchmark Audit For Docker.