IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Api_connect | Ibm | 10.0.5.3 (including) | 10.0.5.3 (including) |
| Api_connect | Ibm | 10.0.6.0 (including) | 10.0.6.0 (including) |