CVE-2017-1601

IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
ibmsecurity_guardium_database_activity_monitor
10.0
ibmsecurity_guardium_database_activity_monitor
10.0.1
ibmsecurity_guardium_database_activity_monitor
10.1
ibmsecurity_guardium_database_activity_monitor
10.1.2
ibmsecurity_guardium_database_activity_monitor
10.1.3
ibmsecurity_guardium_database_activity_monitor
10.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg22014230
http://www.securitytracker.com/id/1040899
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624
http://www.ibm.com/support/docview.wss?uid=swg22014230
http://www.securitytracker.com/id/1040899
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624