IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_verify_information_queue | Ibm | 1.0.6 (including) | 1.0.6 (including) |
| Security_verify_information_queue | Ibm | 1.0.7 (including) | 1.0.7 (including) |