CVE-2017-1196 IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID:....
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix security compliance analytics | = 1.9.70 | No fix listed |
| ibm Endpoint Manager for Security and Compliance | = 1.9.70 | No fix listed |
References
- www.ibm.com vendor-advisory
- 98911 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory