CVE-2024-39733: IBM Datacap Navigator information disclosure
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 295972.
Other sources
IBM Datacap Navigator stores user credentials in plain clear text which can be read by a local user.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39733?
CVE-2024-39733 has not been assigned a specific severity score, but the exposure of user credentials in plain text is considered a significant security risk.
How do I fix CVE-2024-39733?
To mitigate CVE-2024-39733, ensure that user credentials are encrypted or stored securely, and apply any available patches from IBM for affected Datacap versions.
Which versions of IBM Datacap are affected by CVE-2024-39733?
IBM Datacap versions 9.1.5 through 9.1.9 are affected by CVE-2024-39733.
What type of information is exposed due to CVE-2024-39733?
CVE-2024-39733 exposes user credentials stored in plain clear text, allowing local users to read sensitive authentication information.
Can local users exploit CVE-2024-39733?
Yes, local users can exploit CVE-2024-39733 because they can access and read the user credentials stored in plain clear text.