CVE-2026-8636
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Datacap | 9.1.7 <= 1.8.4 | affected |
| IBM | Datacap | 9.1.8 | affected |
| IBM | Datacap | 9.1.9 | affected |
| IBM | Datacap Navigator | 9.1.7 <= 8.2.1.0 | affected |
| IBM | Datacap Navigator | 9.1.8 | affected |
| IBM | Datacap Navigator | 9.1.9 | affected |
Weaknesses
- CWE-316: CWE-316 Cleartext Storage of Sensitive Information in Memory
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.