CVEvulnerability
CVE-2018-1372
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-521
Description
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772.
Affected configurations
• ibm security guardium big data intelligence 3.1
Related
Weakness · CWE (1)
- CWE-521 Weak Password Requirements weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22013832 Vendor Advisory
- http://www.securityfocus.com/bid/103237 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/137772 VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22013832 Vendor Advisory
- http://www.securityfocus.com/bid/103237 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/137772 VDB Entry, Vendor Advisory