CVE-2017-1362: IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can...

Security readout for executives and security teams

IBM Security Identity Manager Adapters 6.0 and 7.0 may expose stored user credentials to someone who already has local access. This is mainly a credential-confidentiality risk: a low-privileged local user could read secrets and use them elsewhere if permissions and credential handling are weak. Exposure is likely limited to environments running IBM Security Identity Manager Adapters 6.0 or 7.0 where local users can access adapter credential storage. Internet exposure is not indicated by the sources. Prioritize based on credential value and local-user exposure. This is not evidenced as remotely exploitable, but credential disclosure can create downstream compromise risk if privileged or reusable accounts are stored. Mitigation focus: Identify IBM Security Identity Manager Adapter deployments and versions.; Review IBM support guidance for the official remediation path.; Restrict local access to systems running affected adapters..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.