IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.Referenceshttps://www.ibm.com/support/pages/node/6471903https://exchange.xforce.ibmcloud.com/vulnerabilities/196453
