IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Maximo_application_suite | Ibm | 8.7 (including) | 8.7 (including) |
Maximo_application_suite | Ibm | 8.8 (including) | 8.8 (including) |