Weak Password Policy in IBM Security Privileged Identity Manager Virtual Appliance
CVE-2018-1680
5.9MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 2 April 2019
Summary
The IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is susceptible to security risks due to its default configuration, which does not enforce strong password requirements. This oversight can potentially allow attackers to easily gain unauthorized access to user accounts, putting sensitive data and systems at risk. It is crucial for users of this product to implement robust password policies to mitigate the associated security threats.
Affected Version(s)
Security Privileged Identity Manager 2.1.1
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved