CVEvulnerability

CVE-2017-1601

9.8 CRITICAL Published 2018-05-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-521

Description

IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.

Affected configurations

• ibm security guardium database activity monitor 10.0 • ibm security guardium database activity monitor 10.0.1 • ibm security guardium database activity monitor 10.1 • ibm security guardium database activity monitor 10.1.2 • ibm security guardium database activity monitor 10.1.3 • ibm security guardium database activity monitor 10.1.4

Related

Weakness · CWE (1)

  • CWE-521 Weak Password Requirements weakness

References