CVE-2021-39078

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/215589
• https://www.ibm.com/support/pages/node/6572983 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6572983

Frequently Asked Questions

• What is the vulnerability ID for IBM Security Guardium storing user credentials in plain clear text?

  The vulnerability ID is CVE-2021-39078.

• What is the severity rating of CVE-2021-39078?

  The severity rating of CVE-2021-39078 is medium (4.4).

• How does IBM Security Guardium store user credentials?

  IBM Security Guardium stores user credentials in plain clear text.

• Who can read the user credentials stored by IBM Security Guardium?

  A local privileged user can read the user credentials stored by IBM Security Guardium.

• How can I fix the vulnerability in IBM Security Guardium?

  To fix the vulnerability in IBM Security Guardium, update to a version that does not store user credentials in plain clear text and restrict access to privileged users.