CVE-2017-1221

EPSS 0.26%
Veröffentlicht 13.11.2017 23:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Bigfix Platform Version9.2

Ibm ≫ Bigfix Platform Version9.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.493

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

http://www.ibm.com/support/docview.wss?uid=swg22010177

Vendor Advisory

Issue Tracking

http://www.securityfocus.com/bid/101683

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123861

Vendor Advisory

VDB Entry

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-1221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1221

EUVD