IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.
https://exchange.xforce.ibmcloud.com/vulnerabilities/123777
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-10223