CVE-2024-25052
EUVD-2024-2241413.06.2024, 14:15
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | jazz_reporting_service | 7.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-256 - Plaintext Storage of a PasswordStoring a password in plaintext may result in a system compromise.
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.