CVEvulnerability
CVE-2017-1196
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-521
Description
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.
Affected configurations
• ibm bigfix security compliance analytics 1.9.70
Related
Weakness · CWE (1)
- CWE-521 Weak Password Requirements weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22004168 Vendor Advisory
- http://www.securityfocus.com/bid/98911 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/123671 VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22004168 Vendor Advisory
- http://www.securityfocus.com/bid/98911 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/123671 VDB Entry, Vendor Advisory