IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_verify_information_queue | Ibm | 1.0.6 (including) | 1.0.6 (including) |
| Security_verify_information_queue | Ibm | 1.0.7 (including) | 1.0.7 (including) |