Missing Encryption of Sensitive Data
CVE-2018-1938
Summary
IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318.
- LOW
- LOCAL
- NONE
- UNCHANGED
- NONE
- HIGH
- HIGH
- NONE
CWE-311 - Missing Encryption of Sensitive Data
The software does not encrypt sensitive or critical information before storage or transmission.
References
Advisory Timeline
- Published