CVE Vulnerabilities

CVE-2024-39733

Insufficiently Protected Credentials

Published: Jul 14, 2024 | Modified: Sep 18, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 295972.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Datacap Ibm 9.1.5 (including) 9.1.5 (including)
Datacap Ibm 9.1.6 (including) 9.1.6 (including)
Datacap Ibm 9.1.7 (including) 9.1.7 (including)
Datacap Ibm 9.1.8 (including) 9.1.8 (including)
Datacap Ibm 9.1.9 (including) 9.1.9 (including)

Potential Mitigations

References