CVE-2017-1196

EPSS 0.31%
Veröffentlicht 07.06.2017 17:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Bigfix Security Compliance Analytics Version1.9.70

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.513

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

http://www.ibm.com/support/docview.wss?uid=swg22004168

Vendor Advisory

http://www.securityfocus.com/bid/98911

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123671

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-1196

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1196

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1196

EUVD