CVE-2017-1601

Опубликовано: 02 мая 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22014230
Patch
Vendor Advisory
http://www.securitytracker.com/id/1040899
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22014230
Patch
Vendor Advisory
http://www.securitytracker.com/id/1040899
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/132624
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00502

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-521

Связанные уязвимости

GHSA-gm6q-qv7q-5ggv