IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_pak_for_automation | Ibm | 20.0.2-interim_fix002 (including) | 20.0.2-interim_fix002 (including) |
| Cloud_pak_for_automation | Ibm | 20.0.3 (including) | 20.0.3 (including) |