CRITICAL🇵🇱 Wersja polska

CVE-2017-1221

CVSS 9.8v3.0pub. 2017-11-13upd. 2026-05-13

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • IBM Bigfix Platform

    APP
    Ibm
    9.29.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-4013CRITICAL9.0PL ✓same product

IBM BigFix Platform — dowolny upload pliku skutkujący RCE z uprawnieniami root

CVE-2018-1475CRITICAL9.8PL ✓same product

IBM BigFix Platform — brute force kont przez brak blokady logowania

CVE-2016-6082CRITICAL10.0PL ✓same product

RCE przez use-after-free race condition w IBM BigFix Platform

CVE-2018-1600HIGH8.6same product

IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication...

CVE-2018-1479HIGH8.8same product

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to e...