CVE-2017-1601

EUVD-2017-10617
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
ibmsecurity_guardium_database_activity_monitor
10.0
ibmsecurity_guardium_database_activity_monitor
10.0.1
ibmsecurity_guardium_database_activity_monitor
10.1
ibmsecurity_guardium_database_activity_monitor
10.1.2
ibmsecurity_guardium_database_activity_monitor
10.1.3
ibmsecurity_guardium_database_activity_monitor
10.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg22014230
http://www.securitytracker.com/id/1040899
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624
http://www.ibm.com/support/docview.wss?uid=swg22014230
http://www.securitytracker.com/id/1040899
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624