IBM · Report #703819
SQL Injection and plaintext passwords via User Search
Validstatus
highseverity
11upvotes
14 Jan 2022disclosed
Summary
An identified SQL Injection vulnerability was reported to IBM found within an IBM asset. It has been analyzed, and resolved. We thank the xyantix for reporting this vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.