Описание
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.1.0.000 (включая) до 8.1.14 (включая)
Одновременно
cpe:2.3:a:ibm:spectrum_protect_server:*:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00131
Низкий
5.3 Medium
CVSS3
6.5 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
CWE-307
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
EPSS
Процентиль: 33%
0.00131
Низкий
5.3 Medium
CVSS3
6.5 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
CWE-307