CVE-2017-1601

CWE-5216 documents4 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 33.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium Database Activity Monitor
Timeline
PublishedMay 2
Latest updateMay 13

Description

IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gm6q-qv7q-5ggv: IBM Security Guardium 10↗2022-05-13
▶
CVEList
CVE-2017-1601: IBM Security Guardium 10↗2018-05-02
▶

💬Community

3
Bugzilla
CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497↗2017-05-11
▶
Bugzilla
CVE-2016-7047 cfme: API leaks any MiqReportResult↗2016-09-08
▶
Bugzilla
CVE-2016-4457 CFME: default certificate used across all installs↗2016-05-31
▶
CVE-2017-1601 (CRITICAL CVSS 9.8) | IBM Security Guardium 10.0 | cvebase.io