IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_verify_information_queue | Ibm | 1.0.6 (including) | 1.0.6 (including) |
| Security_verify_information_queue | Ibm | 1.0.7 (including) | 1.0.7 (including) |