CVEvulnerability

CVE-2026-8636

7.5 HIGH Published 2026-06-22 Modified 2026-06-26 Official page ↗
Status
Analyzed
Published
2026-06-22
Last modified
2026-06-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-316

Description

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.

Affected configurations

• ibm datacap 9.1.7 • ibm datacap 9.1.8 • ibm datacap 9.1.9 • ibm datacap navigator 9.1.7 • ibm datacap navigator 9.1.8 • ibm datacap navigator 9.1.9

Related

Weakness · CWE (1)

  • CWE-316 Cleartext Storage of Sensitive Information in Memory weakness

References