CVE-2018-1680

CWE-5213 documents3 sources

Severity

7.5HIGH

EPSS

0.2%

top 60.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Privileged Identity Manager

Timeline

PublishedApr 2

Latest updateMay 13

Description

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/security_privileged_identity_manager2.1.1

▶NVDibm/security_privileged_identity_manager2.1.1

🔴Vulnerability Details

GHSA

GHSA-v34v-29jj-8cv7: IBM Security Privileged Identity Manager Virtual Appliance 2↗2022-05-13

▶

CVEList

CVE-2018-1680: IBM Security Privileged Identity Manager Virtual Appliance 2↗2019-04-02

▶