title: IBM Security Access Manager Container information disclosure
description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.
problem types: CWE-257 Storing Passwords in a Recoverable Format
affected:
{
defaultStatus: unaffected
product: Security Verify Access Appliance
vendor: IBM
versions:
lessThanOrEqual: 10.0.6.1, status: affected, version: 10.0.0.0, versionType: semver
}
{
defaultStatus: unaffected
product: Security Verify Access Docker
vendor: IBM
versions:
lessThanOrEqual: 10.0.6.1, status: affected, version: 10.0.0.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL