CVE-2017-1221

EPSS 0.26%
Published 13.11.2017 23:29:00
Last modified 20.04.2025 01:37:25
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Bigfix Platform Version9.2

Ibm ≫ Bigfix Platform Version9.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.26%	0.493

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

http://www.ibm.com/support/docview.wss?uid=swg22010177

Vendor Advisory

Issue Tracking

http://www.securityfocus.com/bid/101683

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123861

Vendor Advisory

VDB Entry

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-1221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1221

EUVD